Is storing passwords with bcrypt enough?Jun 14
I'm building a login system and currently hashing passwords with bcrypt. Just wondering if that’s secure enough these days.
3
Answers (3)
Harun NdogoJun 14
Don’t forget to use HTTPS — hashed or not, credentials shouldn’t be sent in plain text.
Harun NdogoJun 14
Also implement rate limiting and lockouts for brute force protection.
Harun NdogoJun 14
Yes, bcrypt is still standard. Use a strong cost factor (at least 12).