Browse Source

Update docs/guide/security-passwords.md

Co-authored-by: Bizley <pawel@positive.codes>
tags/2.0.43
AlexOConnorHub 3 years ago committed by GitHub
parent
commit
1affade837
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
  1. 2
      docs/guide/security-passwords.md

2
docs/guide/security-passwords.md

@ -3,7 +3,7 @@ Working with Passwords
Most developers know that passwords cannot be stored in plain text, but many developers believe it's still safe to hash
passwords using `md5` or `sha1`. There was a time when using the aforementioned hashing algorithms was sufficient,
but modern hardware makes it possible to cracked such hashes and even stronger ones very quickly using brute force attacks.
but modern hardware makes it possible to crack such hashes and even stronger ones very quickly using brute force attacks.
In order to provide increased security for user passwords, even in the worst case scenario (your application is breached),
you need to use a hashing algorithm that is resilient against brute force attacks. The best current choice is `bcrypt`.

Loading…
Cancel
Save