3 ms·
If you store an individual character hashed then it is trivial to brute force it. I don't think there is a bcrypt work factor that you could use that would prev
by benmmurphy 7y ago
If you store an individual character hashed then it is trivial to brute force it. I don't think there is a bcrypt work factor that you could use that would prevent brute forcing but would allow the individual character to be used for authentication.
- mrfredward 7y agoAnd if you know the first character of a two character password, it's trivial to brute force the second, and so on...
- chrismatheson 7y agoi would definitely expect it to be less secure, but not exactly plain text?