title: Is it O.K to send a password hash to the client?
body: <p>I use a secure one way hash to store passwords on the server.  Can I send this same hash to the client to use as a token.</p>
  
  <p>It is supposed to be an unbreakable one way hash (SHA-256 or similar), plus there is noway to tell that it came from the user password or to even know it is there unless you poke around.</p>
  
  <p>Looking for verification if this is O.K. ?</p>