How to upgrade a password storage scheme (change hashing-algorithm)

后端 未结 7 1178
庸人自扰
庸人自扰 2021-02-02 09:33

I\'ve been asked to implement some changes/updates to an intranet-site; make it \'future proof\' as they call it.

We found that the passwords are hashed using the MD5

7条回答
  •  青春惊慌失措
    2021-02-02 09:52

    Add passwordChange datetime field to the database.

    All password set before day X, check using MD5

    All passwords set after day X, check using BCrypt or whatever.

提交回复
热议问题