title: Replacing plain text password for app
body: <p>We are currently storing plain text passwords for a web app that we have.  </p>
  
  <p>I keep advocating moving to a password hash but another developer said that this would be less secure -- more passwords could match the hash and a dictionary/hash attack would be faster.</p>
  
  <p>Is there any truth to this argument?   </p>