rojoko / devise-argon2

A devise-encryptable password encryptor that uses Argon2

devise-argon2

A devise-encryptable password encryptor that uses argon2

• Continuous Integration

Why use Argon2?

Argon2 won Password Hashing Competition and offers additional security compared to the default bcrypt by adding a memory cost. More info:

• https://github.com/P-H-C/phc-winner-argon2
• https://hynek.me/articles/storing-passwords/

Usage

Assuming you have devise (>= 2.1) and the devise-encryptable plugin set up in your application, add devise-argon2 to your Gemfile and bundle:

gem 'devise-argon2'

Then open up your devise configuration,config/initializers/devise.rb and configure your encryptor to be argon2:

# config/initializers/devise.rb
Devise.setup do |config|
  # ..
  config.encryptor = :argon2
  # ...
end

It is also recommended to uncomment (or add) config.pepper with a random string that will be used in addition to the per-user password_salt when hashing.

Contributing

1. Fork it
2. Create your feature branch (git checkout -b my-new-feature)
3. Commit your changes (git commit -am 'Add some feature')
4. Push to the branch (git push origin my-new-feature)
5. Create new Pull Request

Copyright

Released under MIT License.