hard20 pts · first answer countsauthenticationpassword-hashingmigration

Upgrading old password hashes

Old users have bcrypt hashes with cost 8; you now want Argon2id. You cannot read anyone's password. What is the usual migration?

A.Reset every password and email users new onesB.Run Argon2id directly on the stored bcrypt hashes and delete bcryptC.Ask users to send their passwords to supportD.On each successful login, verify the old hash and save a new Argon2id hash

Discussion 0

Join free to post in the discussion.

Upgrading old password hashes

Discussion 0

Related questions