4 ms·
Uhhh, I have an idea how sha-256 works but not blake3. Is blake3 better for storing passwords? If not, what is the go-to recommended hash for password storage o
by nloladze 7y ago
Uhhh, I have an idea how sha-256 works but not blake3. Is blake3 better for storing passwords? If not, what is the go-to recommended hash for password storage of say, a simple front-facing app for consumers.
- deleted 7y ago[deleted]
- nabla9 7y agoNeither is especially good for storing passwords. Better use specialized password hashing functions like Argon2 or bcrypt.
- klodolph 7y agoSHA-256 is absolutely not recommended for storing passwords, and it was never designed for that purpose. If you are storing passwords with SHA-256 you should immediately migrate them to a password hashing algorithm. See “Upgrading Legacy Hashes” in the link below. https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html https://cheatsheetseries.owasp.org/cheatsheets/Password_Stor... Recommended algorithms: - Argon2 - PBKDF2 - Bcrypt