Hacker News new | ask | show | jobs
by arzel 1484 days ago
What were* the passwords hashed with?
1 comments

From https://github.blog/2022-05-26-npm-security-update-oauth-tok...

“The password hashes in this archived data were generated using PBKDF2 or salted SHA1 algorithms previously used by the npm registry. These weak hashing algorithms have not been used to store npm user passwords since the npm registry began using bcrypt in 2017. ”