Rainbow tables do not magically make passwords easier to crack. This is a common misconception. While rainbow tables are useful in some narrow cases, they don't apply to most password cracking. They are nearly useless for things like cracking mass password dumps, even when the passwords are unsalted. Whenever somebody mentions "rainbow tables", they are almost certainly repeating this common misconception. This talk will discuss this and other common misconceptions about passwords, with lots of visual aids to help make the points.