Hashing passwords?

edwyr has asked for the wisdom of the Perl Monks concerning the following question:

Replies are listed 'Best First'.
Re: Hashing passwords? by cavac (Prior) on Apr 04, 2022 at 09:21 UTC
Hashing passwords alone is not secure. You need to "hash and salt". Explanation: Adding Salt to Hashing: A Better Way to Store Passwords Wikipedia article Tom Scott video on storing passwords. Not really up-to-date, but still relevant. `perl -e 'use Crypt::Digest::SHA256 qw[sha256_hex]; print substr(sha256_hex("the Answer To Life, The Universe And Everything"), 6, 2), "\n";'`	[reply] [d/l]
Re: Hashing passwords? by Anonymous Monk on Apr 02, 2022 at 18:57 UTC
same way as in other languages. Password::OWASP, PBKDF2::Tiny	[reply]