Skip to main content
Share Your Experience: Take the 2024 Developer Survey
4 votes
Accepted

How do databases/companies change their hashing algorithm?

The application does not have to and should not wait until the user has logged in. They can hash all currently stored hashes with the new algorithm to produce h2(h1(p)), where h1 is the old algorithm ...
Ja1024's user avatar
  • 7,812
3 votes

How do databases/companies change their hashing algorithm?

You answered your own question - your second hypotheses is correct, this is how it's done in practice. Notice that the password hashing function built-in to most frameworks is actually designed with ...
mti2935's user avatar
  • 23.6k

Only top scored, non community-wiki answers of a minimum length are eligible