News for hackers. Stuff that matters.

A comment on Bitwarden_rs: Unofficial Bitwarden compatible server written in Rust. Parent comment

Re:Bitwarden_rs: Unofficial Bitwarden compatible server writ... by CivBase on Thursday March 18, 2021 @09:11AM (#26502274)
That's actually a cool idea for a password manager in general. After logging in, you input a "salt" value that is appended to the end of all your passwords. That value is never sent to the password server, so even if the server is compromised your associated accounts aren't.
[ Parent | on HN ]
Re:Bitwarden_rs: Unofficial Bitwarden compatible server writ... by jaegerma on Thursday March 18, 2021 @09:30AM (#26502452)
There's actually a name for that: pepper

Instead of a salt, which is random for each entry and has to be stored along the hash, one single pepper is added to each password before hashing and kept secret.

[ Parent | on HN ]