Class BCryptSHA256PasswordHasher

django.contrib.auth.hashers.BCryptSHA256PasswordHasher

Secure password hashing using the bcrypt algorithm (recommended)

Declaration

class BCryptSHA256PasswordHasher(BasePasswordHasher)

Documentation

This is considered by many to be the most secure algorithm but you
must first install the bcrypt library.  Please be warned that
this library depends on native C code and might cause portability
issues.

Methods

▶ def decode(self, encoded) override
inherited doc Return a decoded database value.
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.decode.
```
The result is a dictionary and should contain `algorithm`, `hash`, and
`salt`. Extra keys can be algorithm specific like `iterations` or
`work_factor`.
```
▶ def encode(self, password, salt) override
inherited doc Create an encoded database value.
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.encode.
```
The result is normally formatted as "algorithm$salt$hash" and
must be fewer than 128 characters.
```

▶ def harden_runtime(self, password, encoded) override

inherited doc Bridge the runtime gap between the work factor supplied in `encoded` and the work factor suggested by this hasher.

source link

This method overrides django.contrib.auth.hashers.BasePasswordHasher.harden_runtime.

Taking PBKDF2 as an example, if `encoded` contains 20000 iterations and
`self.iterations` is 30000, this method should run password through
another 10000 iterations of PBKDF2. Similar approaches should exist
for any hasher that has a work factor. If not, this method should be
defined as a no-op to silence the warning.

▶ def must_update(self, encoded) override
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.must_update.
▶ def safe_summary(self, encoded) override
inherited doc Return a summary of safe values.
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.safe_summary.
```
The result is a dictionary and will be used where the password field
must be displayed to construct a safe representation of the password.
```
▶ def salt(self) override
inherited doc Generate a cryptographically secure nonce salt in ASCII.
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.salt.
▶ def verify(self, password, encoded) override
inherited doc Check if the given password is correct.
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.verify.

Subclasses

django.contrib.auth.hashers.BCryptPasswordHasher

Django

Class BCryptSHA256PasswordHasher

Declaration

Documentation

Methods

Subclasses