Is it still safe for large production applications with a large user base to use bcrypt as the password hashing algorithm ?
Nijeesh Joshy

Nijeesh Joshy @nijeesh4all

About: Some one Who Love to Code ,Create and Experiment with Everything

Location:
Karur
Joined:
Nov 17, 2017

Is it still safe for large production applications with a large user base to use bcrypt as the password hashing algorithm ?

Publish Date: Sep 3 '19
8 3

I have been doing backend dev for 3 years now, i read couple of articles recently which says argon2 is much more safer than bcrypt everyone should switch to it.

Is it still safe for large production applications with a large user base to use bcrypt as the password hashing algorithm or should it switch ?

Comments 3 total

  • Douglas R Andreani
    Douglas R AndreaniSep 3, 2019

    The problem with bcrypt is that, it's very secure if you know what you are doing. Select the wrong parameters and you can screw everything.
    On the other hand, newer implementations will not allow you to selece insecure hashes and being easier to use.

    • Nijeesh Joshy
      Nijeesh JoshySep 4, 2019

      SO there is no need for changing it if i am using the bcrypt out of a std library like device for rails or passport for node ?

      • Douglas R Andreani
        Douglas R AndreaniSep 4, 2019

        I can't guarantee you that. You should read to understand best practices to use bcrypt and make sure you are following all of them.

Add comment