bcrypt

What problem does it solve?

Protects user accounts by converting plaintext or legacy-stored passwords into secure BCrypt hashes and verifying credentials during authentication to prevent credential theft and user enumeration.

Core Features & Use Cases

• Installation and configuration guidance including sensible work-factor defaults and tuning for production.
• Dependency injection and mixin helpers for handlers, interceptors, views, and services to hash, verify, and generate salts.
• End-to-end patterns for user registration, authentication, password change, and token-based password resets.
• Best practices for avoiding plaintext storage, preventing user enumeration, upgrading legacy hashes, and rate-limiting login attempts.

Quick Start

Hash and store a new user's password with the bcrypt helper before saving the user record.