That's better, but still horribly broken. Sha1 and md5 simply aren't adequate fo...

		LukeShu on June 26, 2011 \| parent \| context \| favorite \| on: Electronic Arts Hates Strong Passwords That's better, but still horribly broken. Sha1 and md5 simply aren't adequate for secure passwords, they are still broken too quickly. You should use bcrypt. http://codahale.com/how-to-safely-store-a-password/ explains why, and links to implementations of bcrypt in many environments/languages (in the opening when he says "Use bcrypt" a hundred times).

thanks. I had something like that in mind, but didn't know what it was called.