3 ms·

Any modern Rails app is very likely using bcrypt to store password hashes. It's baked into most of the popular auth frameworks.

• JonnieCache 15y ago
  It's actually now baked into rails itself. You can declare has_secure_password in the model and you're away.
  • lawnchair_larry 15y ago
    Why would you have to declare it?
    • mguillemot 15y ago
      Because it adds a few attributes (like 'password') and methods (like 'authenticate') to your model, and you might not really want such things on every one of your models. Clarification: has_secure_password does NOT mean you choose between secure or non-secure password, it just mean "I want a password on this model, and better make it secure guys!"