Hash passwords with argon2

fasouto · Oct 25, 2016 · 3a1a3ff · 3a1a3ff
1 parent 5a33b25
commit 3a1a3ff
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 1 deletion.
diff --git a/project_name/settings/base.py b/project_name/settings/base.py
@@ -53,8 +53,9 @@
     'base',
 ]
 
-# https://docs.djangoproject.com/en/1.10/topics/auth/passwords/#using-bcrypt-with-django
+# https://docs.djangoproject.com/en/1.10/topics/auth/passwords/#using-argon2-with-django
 PASSWORD_HASHERS = (
+    'django.contrib.auth.hashers.Argon2PasswordHasher',
     'django.contrib.auth.hashers.BCryptSHA256PasswordHasher',
     'django.contrib.auth.hashers.BCryptPasswordHasher',
     'django.contrib.auth.hashers.PBKDF2PasswordHasher',

diff --git a/requirements.txt b/requirements.txt
@@ -1,4 +1,5 @@
 alabaster==0.7.9
+argon2-cffi==16.2.0
 astroid==1.4.8
 Babel==2.3.4
 bcrypt==3.1.0

diff --git a/requirements_to_freeze.txt b/requirements_to_freeze.txt
@@ -1,6 +1,7 @@
 # Based on http://www.kennethreitz.org/essays/a-better-pip-workflow
 
 django
+argon2-cffi
 
 # Templates
 django-appconf