yeah so that means they can't see your password. it should be used with any password database, but numerous breaches of stored passwords prove that developers overlook this basic precaution