News for hackers. Stuff that matters.
Re:Should I Use jwts For Authentication Tokens? by swiftcoder on Monday May 27, 2024 @12:41PM (#40492384)
> the stored (hashed) password in your database

Hashed and salted

I hope

Re:Should I Use jwts For Authentication Tokens? by angoragoats on Monday May 27, 2024 @12:43PM (#40492404)
Technically yes, of course, but if you’re using an algorithm that requires you to manually worry about salting then you’re probably doing it wrong. Hence, “hashed” with an algorithm like bcrypt or scrypt is good enough.