3 ms·

So salted bcrypt isn't relatively safe?

• KMag 10y ago
  It's safer than, say, unsalted MD4 (NTLM). However, the specifics of the hash only make a difference if your password is weak. As long as the hash is non-invertible, use passwords containing at least 96 bits of entropy, and you're fine. I use https://github.com/kmag/store_password_gpg https://github.com/kmag/store_password_gpg , which is a 200-line Python script I wrote a while ago to generate a random password and encrypt it using gpg. Any decent password manager should allow you to generate unique, random, per-site passwords.