4 ms·
It’s 2020 and password-cracking is done on GPUs nowadays. The multiple rounds of PHPass do nothing against the speed of modern GPUs. You need a password hash th
by fmajid 6y ago
It’s 2020 and password-cracking is done on GPUs nowadays. The multiple rounds of PHPass do nothing against the speed of modern GPUs. You need a password hash that also requires a lot of RAM to compute to limit parallelism, like argon2 or scrypt.
- dogma1138 6y agoIt’s 2020 use OpenID Connect or any other “federated/delegated authentication” or anything else you may think off that doesn’t forces you to store passwords.