They base their math on SHA256, which is not a hash function anyone should be using for password hashing, being cracked by bitcoin ASICs, which are completely i

They base their math on SHA256, which is not a hash function anyone should be using for password hashing, being cracked by bitcoin ASICs, which are completely irrelevant to hash cracking because they are incapable of doing the required math in their current form. They are ASICs, they do 1 thing and 1 thing only, and it's not crack passwords hashed with SHA256 sadly. This fundamental problem with their argument either shows a serious lack of understanding regarding the subject of password hashing/cracking or it's simply being done because they don't expect their readers to understand it. Given the product they are pushing, I'm uncomfortable with both scenarios. Passwords should be hashed with Bcrypt or Argon2, maybe Scrypt or PBKDF2 in some special cases. https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html https://cheatsheetseries.owasp.org/cheatsheets/Password_Stor...