Node.js · Middle · Question 37 of 75

How should passwords be stored?

✓Correct answer: Hashed with a slow, salted algorithm like Argon2id, scrypt or bcrypt
2Encrypted with AES so they can be decrypted when needed
3Hashed with SHA-256

Explanation

Fast hashes like SHA-256 can be brute-forced quickly on GPUs. Node.js has crypto.scrypt built in; Argon2 and bcrypt are available as packages.

Further reading

Test yourself

Take the Node.js · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.