I have passwords hashed using bcypt version \$2a\$ (e.g. "\$2a\$06\$...") and I want to convert them to version \$2b\$ (e.g. "\$2b\$06$..."). Is it possible to do that? If yes, are there any disadvantages?

  • $\begingroup$ I found this a bit of library usage see on stackoverflow $\endgroup$
    – kelalaka
    Jun 1 at 11:21
  • 1
    $\begingroup$ There is no difference between 2a, 2x, 2y, and 2b. If you wrote your implementation correctly, they all output the same result. $\endgroup$
    – kelalaka
    Jun 1 at 11:28
  • $\begingroup$ The version $2b$ is not "better" or "stronger" than $2a$. It is a remnant of one particular buggy implementation of BCrypt. But since BCrypt canonically belongs to OpenBSD, they get to change the version marker to whatever they want. $\endgroup$
    – kelalaka
    Jun 1 at 11:28

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.