PBKDF2 & Choosing the Right Algorithm
Compare PBKDF2 with bcrypt/Argon2 and select the best for your app.
Welcome
In this final beginner lesson, we study PBKDF2, compare it to bcrypt and Argon2, and create a decision framework for selecting the right password hashing algorithm.
PBKDF2 Overview
PBKDF2 (Password-Based Key Derivation Function 2) was published in RFC 2898 (2000). It applies a pseudorandom function (typically HMAC-SHA256) iteratively to the password + salt.
All lessons in this course
- Why Plain SHA-256 Fails for Passwords
- bcrypt: Algorithm & Cost Factor
- Argon2: Memory-Hard Password Hashing
- PBKDF2 & Choosing the Right Algorithm