4 ms·
When your machine is breached and the list of hashed passwords is stolen along with the code the attackers will be able to brute force at very high speed all of
by jws 14y ago
When your machine is breached and the list of hashed passwords is stolen along with the code the attackers will be able to brute force at very high speed all of your customers' passwords, then use these to get into the customers' gmail/yahoo/hotmail/paypal accounts (because they used the same or similar password) and from there do real financial damage to your customers. And it will all be your fault.
The point of bcrypt is to make it so they can't brute force at high speed. (If you choose your number well enough.)