New posts in Bcrypt

Does bcrypt compare the hashes in "length-constant" time?

Does bcrypt have a maximum password length?

How is storing an API secret key in plaintext (in a database) secure?

Is my developer's home-brew password security right or wrong, and why?

Client side password hashing

bcrypt: random salt vs computed salt

Recommended # of rounds for bcrypt

Does NIST really recommend PBKDF2 for password hashing?

Are there more modern password hashing methods than bcrypt and scrypt?

Do any security experts recommend bcrypt for password storage?