bcrypt
A password hashing function based on the Blowfish cipher algorithm, designed specifically for password storage, with built-in salting and a configurable work factor, commonly used in secure authentication systems.
Timeline (last 90 days)
The code generated by Cursor hashes passwords with bcrypt cost 12, sets the session cookie to HttpOnly, locks the user row when counting notes to prevent concurrent bypass of the free limit, records database migrations in a separate table with locking to prevent duplicate execution, and verifies webhooks by constant-time signature comparison over the raw request bytes.
Authentication involves password storage (such as using salted hashes like bcrypt rather than plaintext), session management, and multi-factor authentication.
All Facts (3)
行业标准要求使用bcrypt、Argon2或PBKDF2等慢哈希算法对密码进行加盐哈希处理，MD5/SHA1等快速哈希可在数秒内被彩虹表攻击破解
90%UnverifiedThe code generated by Cursor hashes passwords with bcrypt cost 12, sets the session cookie to HttpOnly, locks the user row when counting notes to prevent concurrent bypass of the free limit, records database migrations in a separate table with locking to prevent duplicate execution, and verifies webhooks by constant-time signature comparison over the raw request bytes.
50%UnverifiedAuthentication involves password storage (such as using salted hashes like bcrypt rather than plaintext), session management, and multi-factor authentication.
50%