3 ms·
The problem is that pacofvf's answer assumes you don't need to do this retroactively. This would work if you were building a new system today, but if you had a
by richardlblair 12y ago
The problem is that pacofvf's answer assumes you don't need to do this retroactively.
This would work if you were building a new system today, but if you had a DB full of one way hashes you're not going to be able to retroactively modify the pepper.
- richardlblair 12y agoAnd more importantly, slack straight up stated they salt the password and use bcrypt. It's all one way hashes, no encrypting/decrypting going on.