password hashing
Store a salted password hash using a purpose-built password hashing function.
Use this when A service must support password authentication.
without the term
“We store passwords with SHA-256 right now. Is that okay? Can you make password storage secure and upgrade existing users when they log in?”
with the term · How do you ask a model for password hashing?
Use the authentication library’s password hashing and verification. Test login and hash upgrades, and verify raw passwords never enter storage or logs.
What is password hashing?
Store a slow, salted hash made by bcrypt, scrypt, or Argon2, never the password and never a fast hash like SHA-256. Login hashes the attempt and compares.
Why does password hashing matter when vibe coding?
A fast general-purpose hash makes offline guessing cheaper after a database leak.
How do you do password hashing?
Use the maintained authentication library’s password storage and upgrade path; keep raw passwords out of logs.
What goes wrong with password hashing?
Replacing a password hash with reversible encryption as the primary storage mechanism.