How should user passwords be stored?
- A Hashed with a slow algorithm such as bcrypt or argon2, with a unique salt
- B Encrypted with AES
- C Base64 encoded
- D Hashed with MD5
Answer
Hashed with a slow algorithm such as bcrypt or argon2, with a unique salt
Hashing is one-way, so a database breach does not reveal passwords. Fast digests such as MD5 and SHA1 are trivially brute-forced.





