3 ms·
How MembershipReboot stores passwords (2014)
- StavrosK 11y agoThis isn't that innovative, it's exactly what Django does by default. By the way, this: > And finally, MembershipReboot allows an application to require the user change their password periodically. This way user’s password can get updated with the current iteration count. is pretty horrible. Don't force the user to change their password. If you need to upgrade the iterations, just do it seamlessly the next time they authenticate.
- deleted 11y ago[deleted]
- ExpiredLink 11y agoHe doesn't store passwords - which would be a terrible idea.
- melle 11y agoHow is this different from bcrypt?
- t0mas88 11y agoI stopped reading here: > To help determine the right iterations for your hardware I have an utility here. Everyone with just the slightest idea of how hashing and password cracking works should know that there is no such thing as "right number of iterations for your hardware" because the attacker would obviously have different hardware.