Hacker News new | ask | show | jobs
by Wezc 4586 days ago
I never thought about your situation. As a kid web dev I used to limit password size for db issues as 'byoung2' said: like using a VARCHAR(42) or something like taht depending on the way I store the hash! Anyway, next time I'll think about you and allow user more space for password! :)
1 comments

No, no, no. You want to use a hash function that's going to keep it at a length already. In fact just use BCrypt, and don't do anything funky yourself.