In this session we'll discuss methods of securely storing passwords and what to watch out for.
- Use Bcrypt
- Goals for password security
- Never use a bare hash (e.g. MD5, SHA1)
- They're too fast
- Use Bcrypt (or Scrypt)
- If you can't use those, use PBKDF2 and slow it way down