3 ms·
There are other migration techniques. If you know md5(password), you can create bcrypt(md5(password)).
by danielweber 10y ago
There are other migration techniques. If you know md5(password), you can create bcrypt(md5(password)).
- syncsynchalt 10y agoThat's what I do, though care should be taken that you can't then login against the old passwords by putting md5(password) in the password field. Usually you do this by decorating the bcrypt(md5(p)) entries in some way so you can recognize which ones are tested with bcrypt() vs bcrypt(md5()).