I'm sure tptacek will be along shortly to elaborate. One would think it gets stored in the database, but man all these hashes are so slow to generate. And whic

I'm sure tptacek will be along shortly to elaborate. One would think it gets stored in the database, but man all these hashes are so slow to generate. And which library are we using again for that? bcrypt? scrypt? Seems unnecessarily slow. I bet SHA256 is good 'nuff, and way faster. Lets just meanwhile call the cloud consultant to move this to a separate service. Have you heard the good word about AWS Cognito? I heard its web scale. Nah, too expensive, we should just write our own real quick how hard can it be..