Hacker News new | ask | show | jobs
by marpstar 2658 days ago
On a project I started last year, I used SHA512 (probably overkill but who cares) and then bcrypt. Allows users to have passwords of arbitrary size with the goodness of bcrypt.

Then AES256 the result and use that. I read somewhere that's what Facebook does.