Merge pull request #1497 from slingamn/bcrypt_cost

reduce recommended bcrypt cost to the lowest allowed value
This commit is contained in:
Shivaram Lingamneni 2021-01-21 08:25:21 -05:00 committed by GitHub
commit 0e311e27ee
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 4 additions and 2 deletions

@ -372,7 +372,8 @@ accounts:
max-attempts: 30
# this is the bcrypt cost we'll use for account passwords
bcrypt-cost: 9
# (note that 4 is the lowest value allowed by the bcrypt library)
bcrypt-cost: 4
# length of time a user has to verify their account before it can be re-registered
verify-timeout: "32h"

@ -344,7 +344,8 @@ accounts:
max-attempts: 30
# this is the bcrypt cost we'll use for account passwords
bcrypt-cost: 9
# (note that 4 is the lowest value allowed by the bcrypt library)
bcrypt-cost: 4
# length of time a user has to verify their account before it can be re-registered
verify-timeout: "32h"