SampleProvider / Meadow-Guarder-old2

A free browser RPG game.
http://meadowguarder.herokuapp.com/
Other
16 stars 7 forks source link

Passwords are stored as plain text strings - they must be hashed and salted. #345

Open Suvanth-Erranki opened 2 years ago

Suvanth-Erranki commented 2 years ago

Increase the character limit, hash the passwords using bcrypt. Even @radioactive64 hashes passwords.

Use bcrypt library for hashing - it is very secure and is used by Radioactive64 as well.

Hashing - Use sha256 when hashing, because this will turn the passwords into 256bit hashes. Use base64, not hex.

Salting - Password salting involves adding a string of between 32 or more characters to a password and then hashing it.