1. 2
  1.  

  2. 1

    A properly identified match is first based on an email match and then a match between the bcrypt hashes for the passwords of those email matches.

    Nice. Pinterest uses bcrypt for password hashing.