Hacker News new | past | comments | ask | show | jobs | submit login

As long as they’re continually bumping the work factor it should be good for now.



If passwords are peppered as well as salted, is the bcrypt work factor a factor?


When the pepper is compromised, the work factor still matters.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: