Comment Comment by intrepidlemon Not necessarily. They could run str.lower() on the password input before hashing and saving the hash. Then to verify the password, you just always run str.lower() on the input before calculating the hash. parent intrepidlemon 7 years ago