5 ms·
If you're using bcrypt then the client has transmitted the password to you. You can store a higher cost hash after verifying the password against the old hash.
by Strilanc 16y ago
If you're using bcrypt then the client has transmitted the password to you. You can store a higher cost hash after verifying the password against the old hash.