Change password encryption algorithm
Opened this issue · 4 comments
C3realGuy commented
Switch from SHA-1 to something better.
Maybe bcrypt or something like that?
Don't think that this is high priority, but should be done.
EDIT: Elkarte is using sha256.
Nao commented
Did Elk switch to sha256 recently..?
C3realGuy commented
They switched to sha256 in January 2014.
elkarte/Elkarte@076fc85
Nao commented
So... Should it be password_hash, at this point? I think I've seen that mentioned in passing...