4 ms·

I'm really interested into the longer answer! I'm sold on bcrypt but like to hear scaling stories :)

• moe 15y ago
  One possible, slightly longer, answer would be that "login" is a relatively rare operation in the grand scheme of things. Users (usually) need to login only once per session. And on sites that have the little "Remember me"-tickbox a session may very well last for days or even months.