Lesson 02 · 10 min
Passwords: hash, salt, bcrypt
You never store a password. You store a slow, salted hash.
A hash is a one-way function: getting a hash from a password is easy, going back isn't. On sign-in you hash the input and compare. A salt is random bytes added to each password, so identical passwords give different hashes. A slow algorithm (bcrypt, argon2) makes brute force expensive.
Sign in to continue
The rest of this lesson opens after sign up
The first lesson of every course is open without an account. To read on, solve the practice and use Ask, create a free account or log in.