bcrypt
Safeguard articles tagged "bcrypt" — guides, analysis, and best practices for software supply chain and application security.
7 articles
Secure password hashing in Go: bcrypt, Argon2, and the mistakes in between
Go's bcrypt package caps input at 72 bytes and returns ErrPasswordTooLong instead of silently truncating — one of several Go-specific quirks that trip up password hashing code.
Cryptographic salt vs pepper
What is a cryptographic salt, and how does it differ from pepper in password hashing? A technical breakdown of salted hashes, bcrypt salt rounds, and best practices.
Password Salt and Hash: How to Store Passwords Safely
Storing a password means hashing it with a slow algorithm and a unique salt, never encrypting it or saving it in plaintext. Here's how salting and hashing actually protect users.
Password Storage Best Practices Every Developer Should Follow
Storing passwords safely comes down to one rule: never store the password. Here are the password storage best practices that actually hold up against modern attacks.
How to Use bcryptjs from npm Safely: A Security Review
The bcryptjs npm package is a pure-JavaScript bcrypt implementation with zero native dependencies. Here is when to reach for it, how to use it correctly, and the pitfalls that weaken password hashing.
How to Hash a Password in Java the Right Way in 2025
To hash a password in Java, use a slow, salted, adaptive algorithm like bcrypt or Argon2 — never a raw SHA or MD5 digest. This guide shows working code and the tuning that actually matters.
Storing Passwords Securely: What Actually Works
Storing a password means storing a slow, salted hash of it, never the password itself. Here is the modern approach that survives a database breach.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.