bcrypt
A password hashing function based on the Blowfish cipher, with a work factor that sets its cost (Provos and Mazières, 1999). Most implementations use only the first 72 bytes of the input; OWASP recommends it only where Argon2id and scrypt are unavailable, with a work factor of at least 10.
- Defined in
- OWASP Password Storage Cheat Sheet
Covered in
Practice: Password hashing lab: Verify and upgrade an Argon2 password hash on login