Question about password hash sync

Question

Hi,

I am trying to understand how password hash sync works. If 365 only syncs a hash from the DC and not the actual password, then what exactly happens when you enter your password into a web app or office.com for it to be able to know that you are entering the correct password? Also any thoughts on PHS vs PTA with regards to security would be helpful.

Answer 1

Hi,

The password that you enter when signing in to office.com is hashed, and then this is compared to the synced hash. If the two match, then Azure AD knows you entered the correct password.

If the above was helpful please click Accept Answer.

Thanks.

-TP