Which password hashing algorithm is specifically designed for password storage and is generally preferred over MD5 or SHA-256?
- A.MD5
- B.SHA-256
- C.bcrypt
- D.Base64
Why C is correct
bcrypt is an adaptive algorithm designed for password hashing. It incorporates a work factor (cost parameter) that can be increased over time to keep pace with hardware improvements. MD5 and SHA-256 are fast general-purpose hashes, unsuitable for passwords. Base64 is encoding, not hashing.
Know someone studying for Web App Fundamentals? Send them this one.