News for hackers. Stuff that matters.
Re:Peppering (Password Storage) by stouset on Thursday July 02, 2020 @12:17PM (#23714874)
If not stored in the database, it ensures that a database dump alone isn’t enough to recover even a single password. It certainly doesn’t have the level of impact that salting passwords or using a cpu-hard and memory-hard hash does, but it’s certainly something.

Modern password hashes like argon2 include this feature natively.

There are no comments on this comment yet.