password-storage

This Skill compares password hashing algorithms like Argon2id, bcrypt, and scrypt, recommending memory-hard functions and unique salts to prevent credential stuffing and minimize the impact of password leaks.

Tune cost parameters for password hashing functions by balancing security and performance. This Skill provides guidance on calibrating memory-hard functions like Argon2id and scrypt to resist offline and online attacks without degrading system performance.

Argon2id, bcrypt, and scrypt differ in memory-hardness and resistance to offline attacks. This Skill offers comparisons and recommendations for password storage, helping you select the appropriate hashing algorithm based on your specific security needs.

Migrate from weak password storage schemes to secure hashing by following migration patterns outlined in this Skill. It details strategies for transitioning to memory-hard functions like Argon2id while maintaining authentication system design compliance during security audits.

Yes, designing secure authentication requires knowledge of cryptographic algorithms and secure coding practices. This Skill provides best practices for password storage but assumes familiarity with memory-hard functions, salts, and peppers to properly implement recommended schemes.

Using salts and peppers enhances password storage security by ensuring hashes are unique and resistant to pre-computed attacks. This Skill explains the importance of applying both techniques alongside memory-hard hashing algorithms to maximize protection against credential stuffing.