Improve password storage for security #58
Description
Hi !
Currently there is only a sha256 sum used to store the password in the database (for example).
This is considered as a bad practice. See here
We should either:
- (at least) Add a salt to the shasum in order to avoid rainbow tables uses if the database leaks.
- (best) Use a proven secured function (like Argon2), which adds layers of security (like preventing timing attacks).
For more informations:
https://security.stackexchange.com/questions/195563/why-is-sha-256-not-good-for-passwords
https://dusted.codes/sha-256-is-not-a-secure-password-hashing-algorithm