Learn the proper methods for storing passwords to ensure they remain protected even if an application or database is compromised. This guide highlights the importance of using hashing (not encryption) for passwords, the benefits of using salts and peppers, and the recommended hashing algorithms like Argon2id, scrypt, bcrypt, and PBKDF2. It also discusses work factors, upgrading legacy hashes, and ensuring compatibility with international characters.

13m read timeFrom cheatsheetseries.owasp.org
Post cover image
Table of contents
Introduction ¶Background ¶Methods for Enhancing Password Storage ¶Password Hashing Algorithms ¶Upgrading Legacy Hashes ¶

Sort: