diff options
| author | Ritik Soni <47344024+ritiksoni00@users.noreply.github.com> | 2022-09-17 13:19:09 +0530 |
|---|---|---|
| committer | Mariusz Felisiak <felisiak.mariusz@gmail.com> | 2022-09-17 09:49:34 +0200 |
| commit | 0859093f7c240b9677c62cac3682fd8c2643fa97 (patch) | |
| tree | a22b68441a86e9e8f49d82fc4112ac673a766d54 /docs | |
| parent | 160d0aacb86d06dc554e5bba78e1d6b3183ed790 (diff) | |
[4.1.x] Fixed #34017 -- Doc'd that Argon2id variant is used by Argon2PasswordHasher.
Backport of c11336cd990e155371a5185cf3bd6942cad8d9da from main
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/topics/auth/passwords.txt | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/docs/topics/auth/passwords.txt b/docs/topics/auth/passwords.txt index d8986b544d..37ce8514b0 100644 --- a/docs/topics/auth/passwords.txt +++ b/docs/topics/auth/passwords.txt @@ -83,13 +83,14 @@ Using Argon2 with Django Argon2_ is the winner of the 2015 `Password Hashing Competition`_, a community organized open competition to select a next generation hashing algorithm. It's designed not to be easier to compute on custom hardware than it is to compute -on an ordinary CPU. +on an ordinary CPU. The default variant for the Argon2 password hasher is +Argon2id. Argon2_ is not the default for Django because it requires a third-party library. The Password Hashing Competition panel, however, recommends immediate use of Argon2 rather than the other algorithms supported by Django. -To use Argon2 as your default storage algorithm, do the following: +To use Argon2id as your default storage algorithm, do the following: #. Install the `argon2-cffi library`_. This can be done by running ``python -m pip install django[argon2]``, which is equivalent to |