ArneVogel/listudy_old

SHA256 is not a secure way to store password

Nicals opened this issue · 1 comments

You should use pbkdf2 or bcrypt to store password, sha256+salt is not an acceptable password storage solution. Here is a relevant thread on the subject

Thanks for letting me know. I changed the hashing algorithm to bcrypt, see 61a006e.