search

StartupAPI / users

:zap: User management tool to be used in on-line projects. Includes admin dashboard.
http://www.StartupAPI.com/
MIT License
60 stars 24 forks source link

Use bcrypt for password storage #3

Open sergeychernyshev opened 14 years ago

sergeychernyshev commented 14 years ago

Use bcrypt (Blowfish-based algorithm) as a more secure method to store passwords.

http://www.openwall.com/phpass/ is one of the implementations that can fall back to weaker algorithms if blowfish is not supported.

sergeychernyshev commented 13 years ago

phpass can use "portable" hashes implemented in PHP for PHP version under 5.3.0

It makes sense to "upgrade" the hashes when stronger cyphers are available - created issue #72 to track that.