3 ms·

Bonus points, store meta data about the hash algorithm. That way if you ever need to change it in the future due to a weakness in the algorithm you can validate

Bonus points, store meta data about the hash algorithm. That way if you ever need to change it in the future due to a weakness in the algorithm you can validate the password against old metadata and rehash with new metadata and update the record.

toast0 2y ago
Many of the popular password hashes include metadata in the default output already. bcrypt certainly does.
- asyx 2y ago
  Argon2 as well. Most libraries give you a string that contains all the parameters it needs for hashing.