Skip to content

BCrypt support/enabled by default #106

@Plazmaz

Description

@Plazmaz

Currently the default password used by this project is unsalted sha256. This is unsafe due to advances in modern computing power and rainbow table attacks. To give some context, I can crack unsalted sha256 on my laptop at 108 million guesses per second. This would easily rip through any database your program generates. I strongly suggest switching to bcrypt. If you must use sha256, please generate user-specific salts to protect their integrity.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions