password? if not which package should i use that use salt so even same password get diff hash.
Built in : scrypt + randomBytes
there is bcrypt, not inbuilt though
thanks i found this but there is no salt in hash or may be i can't found it.
https://www.npmjs.com/package/bcrypt#to-hash-a-password
https://www.npmjs.com/package/bcrypt#to-hash-a-password-1
@MrThieves salt can either be a string or the number of rounds
if i use number of rounds for example 100 it's take some seconds to build that?
yeah, takes more time as the number increases, but you can provide your own salt
rounds=31: 2-3 days/hash that means if i use 31 i get my salt after 2 days?
depends on your processor, but yes it's 2 ^31 iterations
so i should just use 10~15 rounds number. is that safe enough?
10 is ok, but depends on your use case, you can always adjust later on
i just want to make sure that password is safe even if i saved password in localStorage and hacker get that password from browser can't found out what is the password.
Обсуждают сегодня