Is it true that, for example, a website or email service does not have access to passwords?

Question

Burglary protection

For example, there are companies that claim they don't have access to passwords. Is it possible? They also have access to the server and databases...

Answer 1

Theoretically, this can be done by hashing/salting your password on the client and not passing it to the server.
In practice, it still remains a matter of trust between you and the site - today they do not transmit the password during authorization, tomorrow the front-end Vasily Shoto messed up, and the password flew away not only to the site database, but also to the campaign that provides an audit of user metrics.

Answer 2

Nobody but them will answer your question.

Answer 3

Why do they need access to passwords when you can see your information without them?))
Usually they don’t have

Answer 4

They also have access to the server and databases...

Yeah, in the database they have passwords like

$2y$10$q5Tcu4qmO166MHMtJiesbO4w3174MhLIbjh1LcB1JYyt975eU0zbW

. Try to decipher what is encrypted here.
It can only be changed to another.
But the problem is that this password protects, most likely, unencrypted data, which means that instead of a password, the company will simply look at the data right away. Well, or, in extreme cases, just change the password ... So the question here is about trust, and not about technology.

Answer 5

If there are no fragments of transferring user passwords to the server in the code, then only the user knows the user password. And passwords and logins are stored in the database, otherwise you would not have logged into your account