5
Argon2id Password Hashing
Source: supabase/supabase#13130 · opened by @jemiluv8
The Feature
I wanted to update our password hashing scheme from using bcrypt to using argon2id.
Why is this useful?
I understand argon2 is the recommended hashing scheme from [OWASP]( Even thought bcrypt is still "secure" and there really is no "pressing" need to "upgrade", I thought it might still be useful.
The Approach
We just hash new passwords using argon2id while supporting "authenticating" users using both hashing
schemes. Below is a code snippet that summarizes the approach
The implementation of GenerateFromPassword
I wanted to update our password hashing scheme from using bcrypt to using argon2id.
Why is this useful?
I understand argon2 is the recommended hashing scheme from [OWASP]( Even thought bcrypt is still "secure" and there really is no "pressing" need to "upgrade", I thought it might still be useful.
The Approach
We just hash new passwords using argon2id while supporting "authenticating" users using both hashing
schemes. Below is a code snippet that summarizes the approach
The implementation of GenerateFromPassword
No pledges yet. Be the first to back this.
Comments
Similar requests
feat(auth): use argon2id as default algorithm for GenerateFromPassword
3 votes · 0 comments
Handling the Password Reset for a user by Supabase itself.
2 votes · 0 comments
Handling the Password Reset for a user by Supabase itself.
7 votes · 0 comments
Password reset should not act as OTP
3 votes · 0 comments
YOUR-PASSWORD - suggestion for change
1 vote · 0 comments
No comments yet.