5 ms·
I see you're using bcrypt for now with a salt cost of 10. How do you plan to: 1. Make sure you keep increasing the cost over time 1a. Maybe even newer algor
by conradludgate 2y ago
I see you're using bcrypt for now with a salt cost of 10. How do you plan to:
1. Make sure you keep increasing the cost over time
1a. Maybe even newer algorithms
2. Update old password hashes, even if the user does not log in
- n2d4 2y agoSome people much smarter than me have written excellent articles about this topic: https://www.michalspacek.com/upgrading-existing-password-hashes https://www.michalspacek.com/upgrading-existing-password-has...
- conradludgate 2y agoYou passed my test :) that's the one thing I usually see skipped over with new auth solutions