Skip to content

Commit

Permalink
Merge pull request #8 from Glazy/password-auth-revision
Browse files Browse the repository at this point in the history
fix grammar error in password-authentication page
  • Loading branch information
pilcrowonpaper authored Mar 9, 2024
2 parents 185fb5a + b210c2e commit 6306a30
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion pages/password-authentication.md
Original file line number Diff line number Diff line change
Expand Up @@ -49,7 +49,7 @@ In the most basic form, hashing is a one way process to generate a unique repres

Hashing ensures that if you suffer a data breach, hackers won't be able to get the original password. This is especially important if the breach was limited in scope. Even if they were only able to read the user table, they'll effectively have access to everything once they get hold of user passwords. More importantly, however, it protects your users from further harm. Users often reuse passwords. With leaked passwords, hackers can gain access to user accounts in other applications as well.

However, a big issue with passwords is that they're aren't truly random. Technically there are 62^8 possible 8 character alphanumeric passwords, but reality is that most passwords use common words and names with maybe some numbers at the end. This significantly reduces the number of combinations to test when brute-forcing passwords.
However, a big issue with passwords is that they aren't truly random. Technically there are 62^8 possible 8 character alphanumeric passwords, but the reality is that most passwords use common words and names, maybe with some numbers at the end. This significantly reduces the number of combinations to test when brute-forcing passwords.

As such, slow hashing algorithms specifically designed for passwords are used. Common hashing algorithms like SHA-256 are designed to be fast as possible.

Expand Down

0 comments on commit 6306a30

Please sign in to comment.