Hacker News new | ask | show | jobs
by nloladze 2350 days ago
Uhhh, I have an idea how sha-256 works but not blake3. Is blake3 better for storing passwords? If not, what is the go-to recommended hash for password storage of say, a simple front-facing app for consumers.
2 comments
klodolph 2350 days ago
SHA-256 is absolutely not recommended for storing passwords, and it was never designed for that purpose. If you are storing passwords with SHA-256 you should immediately migrate them to a password hashing algorithm. See “Upgrading Legacy Hashes” in the link below.

https://cheatsheetseries.owasp.org/cheatsheets/Password_Stor...

Recommended algorithms:

- Argon2

- PBKDF2

- Bcrypt

link
nabla9 2350 days ago
Neither is especially good for storing passwords.

Better use specialized password hashing functions like Argon2 or bcrypt.

link