Move to slower hashes for passwords

NovaSquirrel / TilemapTown

A reimagination of the BYOND building game genre in HTML5

14 stars 6 forks source link

Open NovaSquirrel opened 6 years ago

NovaSquirrel commented 6 years ago

Right now I'm using sha512 and I need to figure out how to actually use a slower hash asynchronously.

NovaSquirrel commented 5 years ago

Per-user salts would also be a very good idea, maybe randomly generated every time they change their password?

NovaSquirrel commented 5 years ago

Salts are in, but bcrypt is not, yet