Safely migrating passwords in ASP.NET Core Identity with a custom PasswordHasher

added by DotNetKicks
5/7/2019 10:29:20 AM

2 Kicks, 104 Views

Some time ago I wrote a post on the default ASP.NET Core Identity PasswordHasher implementation, and how it enables backwards compatibility between password hashing algorithms. In a follow up post, I showed how to create a custom IPasswordHasher to slowly migrate existing BCrypt password hashes to the default ASP.NET Core Identity hashing format.