in production?
                  
                  
                  
                  
                  
                  If so do you  pepper the password before storing it? As argon2 salts the password itself, I am not sure if I should add a pepper concatinating a unique string to. Plain password before hashing it.
                  
                  
                
https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html
Обсуждают сегодня