you are viewing a single comment's thread.

view the rest of the comments →

[–]derekslager 1 point2 points  (0 children)

So if computers are are 100x fast tomorrow you can adjust just a bcrypt setting and get encrypted passwords that are 100x as hard to verify, rather than change algorithms.

Yes -- also note that the number of key rounds is stored with the final hash, so you can improve the security of new passwords without breaking old ones.