3 ms·
Of course one shouldn't encrypt them, one should salt and hash them. With a cryptographically secure hash such as bcrypt or scrypt. If you use a batteries-incl
by ovi256 11y ago
Of course one shouldn't encrypt them, one should salt and hash them. With a cryptographically secure hash such as bcrypt or scrypt.
If you use a batteries-included web-framework, this is already done for you. If you do not, you better understand the tradeoff of redeveloping those parts.
- mcdougle 11y agoI imagine the OP probably meant that and simply wrote the wrong thing in the post. I probably wouldn't have noticed it was the wrong wording if not for this comment chain.
- woah 11y agoThe only acceptable advice in this situation is "use bcrypt". Vague stuff about "hashing or encrypting" is not good enough.
- baby 11y agoand if you're salting them yourself you're doing things wrong, use a good library that takes care of these little crypto details for you.