Forgot my password at school, say so, they tell me the password. Have they never heard about security?

You'd be surprised how many companies still don't hash passwords O_o

At a company I interned at the did salted hashes... With the salt in the same spreadsheet...

What system was this for? I'm guessing not Active Directory?

@drRoss
The school uses some 'RES One' thing.

Well how else would you do it@Highlow

Separate hashes and their individual salts and maybe even encrypt the salts for good measure

@Highlow Storing the salt in the same spreadsheet isn't actually all that bad though..?

@quijibo Storing salts right next to the username is fine for verification purposes however salted hash + password + username is stupid bc on simple data breach and they can just hash common passwords with the salt and continue to check. This wasn't some start up ir something this was a security company with one metric f*ckload of users which was facing cyber attacks and should have been more secure

Tldr keep salts separate from users and passwords