Is the unencrypted password. clear_text_password is sysname (nvarchar(128)).
Is the encryption hash of a password. password_hash is varbinary(128).
Obsolete parameter that can be set to 1 if password_hash represents a value from a login earlier than SQL Server 2000 that was migrated to SQL Server 2005 or later but never converted to the SQL Server 2000 system. version is int.
This parameter is provided for backwards compatibility, but is ignored since password hash blobs now contain their own version descriptions. This feature will be removed in the next version of Microsoft SQL Server. Do not use this feature in new development work, and modify applications that currently use this feature as soon as possible.
SELECT name FROM sys.sql_logins
WHERE PWDCOMPARE('', password_hash) = 1 ;
B. Searching for common passwords
To search for common passwords that you want to identify and change, specify the password as the first parameter. For example, execute the following statement to search for a password specified as password.