Class PBKDF2PasswordHasher

django.contrib.auth.hashers.PBKDF2PasswordHasher

Secure password hashing using the PBKDF2 algorithm (recommended)

Declaration

class PBKDF2PasswordHasher(BasePasswordHasher)

Documentation

Configured to use PBKDF2 + HMAC + SHA256.
The result is a 64 byte binary string.  Iterations may be changed
safely but you must rename the algorithm if you change SHA256.

Methods

▶ def decode(self, encoded) override
inherited doc Return a decoded database value.
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.decode.
```
The result is a dictionary and should contain `algorithm`, `hash`, and
`salt`. Extra keys can be algorithm specific like `iterations` or
`work_factor`.
```
▶ def encode(self, password, salt, iterations=None) override
inherited doc Create an encoded database value.
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.encode.
```
The result is normally formatted as "algorithm$salt$hash" and
must be fewer than 128 characters.
```

▶ def harden_runtime(self, password, encoded) override

inherited doc Bridge the runtime gap between the work factor supplied in `encoded` and the work factor suggested by this hasher.

source link

This method overrides django.contrib.auth.hashers.BasePasswordHasher.harden_runtime.

Taking PBKDF2 as an example, if `encoded` contains 20000 iterations and
`self.iterations` is 30000, this method should run password through
another 10000 iterations of PBKDF2. Similar approaches should exist
for any hasher that has a work factor. If not, this method should be
defined as a no-op to silence the warning.

▶ def must_update(self, encoded) override
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.must_update.
▶ def safe_summary(self, encoded) override
inherited doc Return a summary of safe values.
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.safe_summary.
```
The result is a dictionary and will be used where the password field
must be displayed to construct a safe representation of the password.
```
▶ def verify(self, password, encoded) override
inherited doc Check if the given password is correct.
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.verify.

Inherited methods

Methods inherited from django.contrib.auth.hashers.BasePasswordHasher:
salt

Subclasses