The points made here are covered in Coda Hale's post: http://codahale.com/how-to-safely-store-a-password/ http://codahale.com/how-to-safely-store-a-password/ W

The points made here are covered in Coda Hale's post: http://codahale.com/how-to-safely-store-a-password/ http://codahale.com/how-to-safely-store-a-password/ While it recommends using bcrypt, if you augment that with "or scrypt or PBKDF2" the same principles apply.