Too Long; Didn't Read
Not understanding the security implications of password storage can lead to devastating breaches and leaks. If you are building an application and need to store user credentials, learn about hash functions. A hash function (or more specifically in our case, a key derivation function) deterministically creates a strong key from a password. Because hashes are one-way, the attacker can’t re-create the plaintext password from the hash. Because a majority of people reuse passwords on different websites, they can hack other systems. Luckily Bcrypt handles salting automatically.
Share Your Thoughts