beginner · identity

Password Storage

How should passwords be stored?

Practical scenario

The user table is copied by an attacker.

What it tests

  • • Dedicated password hashing
  • • Salt and work factor
  • • Recovery