Explain how changing stretches affects existing password hashes

This commit is contained in:
Petrik
2020-03-12 16:16:55 +01:00
parent 97a6fd2895
commit 63fe1a843f

View File

@@ -114,6 +114,9 @@ Devise.setup do |config|
# ==> Configuration for :database_authenticatable
# For bcrypt, this is the cost for hashing the password and defaults to 12. If
# using other algorithms, it sets how many times you want the password to be hashed.
# The number of stretches used for generating the hashed password are stored
# with the hashed password. This allows you to change the stretches without
# invalidating existing passwords.
#
# Limiting the stretches to just one in testing will increase the performance of
# your test suite dramatically. However, it is STRONGLY RECOMMENDED to not use