Password storage and hashing

Passwords are hashed with a slow, salted algorithm designed for the job. Anything faster is a favour to whoever steals the table.

10m
Intermediate

Video thumbnail for Password storage and hashing

Video by Studying With Alex · YouTube

Check your understanding

3 questions. Unlocks when you finish the video.

Overview

What this lesson covers

Use a slow, salted hash such as argon2 or bcrypt
Tune work factors as hardware improves
Handle reset flows without leaking account existence

This lesson sits in Authentication Done Right, part of Practical Web Security. It assumes what came before it and leads directly into the next lesson in the module.

In this lesson you will:

Use a slow, salted hash such as argon2 or bcrypt
Tune work factors as hardware improves
Handle reset flows without leaking account existence

Resources

OWASP Top 10The official reference for the tools used in this lesson.