Taxonomy results for: Security

Posted on , Archived

Implemented Bcrypt to Hash Stored Passwords

If it's worth doing, it's worth over doing.

I made a large improvement to the way we hash our user passwords on Tentacle CMS. Originally Tentacle was using the default method of hashing passwords used in Dingo, This was a SHA1 hash. Still decent but not really up to newer standards. When a login is processed the username and password are submitted and…