refactor(security): upgrade password hashing algorithm #69

New issue

Open

opened 2025-08-19 06:54:30 +00:00 by chartgerink · 0 comments

chartgerink commented

2025-08-19 06:54:30 +00:00

Owner

We currently use a bcrypt has implementation for hashing passwords and the like. bcrypt is efficient, yet security could be improved if the argon2 hashing would be used. Downside is that argon2 burns more CPU on the server, which could affect performance.

This issue is to track and discuss considerations in upgrading the hashing approach.

We currently use a `bcrypt` has implementation for hashing passwords and the like. `bcrypt` is efficient, yet security *could* be improved if the `argon2` hashing would be used. Downside is that `argon2` burns more CPU on the server, which could affect performance. This issue is to track and discuss considerations in upgrading the hashing approach.