Long, random password stored in plaintext: as soon as the user database is compromised, the attacker can log into your account and do whatever they want. This may result in additional exposure of information that wasn&#x27;t part of the original compromise. The attacker can also impersonate you and cause other kinds of damage.<p>Long, random password hashed with bcrypt&#x2F;scrypt&#x2F;etc: if the user database is compromised, the attacker gets the user database and nothing else.