The salt is a critical component; it ensures that two identical passwords will result in different hash strings. This prevents , where hackers use precomputed lists of hashes to quickly identify common passwords. Because the process is one-way, the original password is never stored on the device, and even the Cisco operating system (IOS) cannot "decrypt" it. Instead, it re-hashes whatever a user types during login and compares that result to the stored hash. Security Strengths and Modern Limitations

Switch(config-if)# exit

When you view your configuration with show running-config , the password will appear as a string beginning with $1$ followed by the hash. If you already have a hashed string from another device and want to paste it directly, you must use the 5 flag to tell the router it is already encrypted: Router(config)# enable secret 5 [already-hashed-string] Use code with caution. Security Analysis: Is Secret 5 Still Safe?

Switch# show ip interface brief