3 ms·
> Django's user model uses a pretty straight forward and good approach[1] You forgot to post the link.
by hk__2 10y ago
> Django's user model uses a pretty straight forward and good approach[1]
You forgot to post the link.
- niftich 10y agoNot OP, but here's the official Django doc on the topic, including a section further down about upgrading the hash without needing a login: https://docs.djangoproject.com/en/1.9/topics/auth/passwords/#password-upgrading https://docs.djangoproject.com/en/1.9/topics/auth/passwords/... Here's a blog post which covers the same topic in an easy-to-understand form, including why computationally-expensive password hashing is important: http://tech.marksblogg.com/passwords-in-django.html http://tech.marksblogg.com/passwords-in-django.html