Safeguard
Tag

bcrypt

Safeguard articles tagged "bcrypt" — guides, analysis, and best practices for software supply chain and application security.

7 articles

Application Security

Secure password hashing in Go: bcrypt, Argon2, and the mistakes in between

Go's bcrypt package caps input at 72 bytes and returns ErrPasswordTooLong instead of silently truncating — one of several Go-specific quirks that trip up password hashing code.

Jul 8, 20266 min read
Cryptography

Cryptographic salt vs pepper

What is a cryptographic salt, and how does it differ from pepper in password hashing? A technical breakdown of salted hashes, bcrypt salt rounds, and best practices.

Feb 26, 20267 min read
Security

Password Salt and Hash: How to Store Passwords Safely

Storing a password means hashing it with a slow algorithm and a unique salt, never encrypting it or saving it in plaintext. Here's how salting and hashing actually protect users.

Jul 1, 20256 min read
Security

Password Storage Best Practices Every Developer Should Follow

Storing passwords safely comes down to one rule: never store the password. Here are the password storage best practices that actually hold up against modern attacks.

May 27, 20255 min read
Open Source

How to Use bcryptjs from npm Safely: A Security Review

The bcryptjs npm package is a pure-JavaScript bcrypt implementation with zero native dependencies. Here is when to reach for it, how to use it correctly, and the pitfalls that weaken password hashing.

May 20, 20256 min read
Security

How to Hash a Password in Java the Right Way in 2025

To hash a password in Java, use a slow, salted, adaptive algorithm like bcrypt or Argon2 — never a raw SHA or MD5 digest. This guide shows working code and the tuning that actually matters.

Feb 11, 20255 min read
Security

Storing Passwords Securely: What Actually Works

Storing a password means storing a slow, salted hash of it, never the password itself. Here is the modern approach that survives a database breach.

Feb 8, 20256 min read

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.

bcrypt — Safeguard Blog