Hacker News new | ask | show | jobs
by throwaway-9111 494 days ago
Why not a simple sha(id + username + bcrypt(pass))

Is there any security issues with that? I'm a "newb" in this area, so I'm genuinely curious about the flaws with the naive approach