How to Use BCrypt to Store Passwords Securely: A Guide to Hashing Best Practices
Plain text passwords are a big no-no. Hashed passwords are better, but not safe enough. Salted passwords are even better, but where do you store the salt? And what if faster computers can crack your hashing algorithm?
In this video, I will show you the ultimate solution to all these problems: bcrypt. It is an industry-proven method to store hashed passwords with their salt and algorithm in one place.
00:00 - Why Hash Passwords
03:43 - Adding Salt to prevent rainbow attacks
07:42 - Adding pepper & salt prevents rainbow attacks
10:30 - bcrypt password-hashing function
16:33 - Structure and algorithm of bcrypt
20:00 - What rounds in bcrypt does
25:30 - EksBlowfish cost
26:15 - bcrypt issues
27:00 - source code of bcrypt python