Bcrypt: Salt & Cost

Difficulty: Intermediate

Question

Why is Bcrypt better than SHA-256 for passwords?

Answer

It has an adaptive work factor (it's deliberately slow) and automatic salting, which makes brute-forcing computationally expensive.

Concepts covered

Bcrypt, Salt, Cost Factor, Rainbow Tables