We are working on integrating our app with auth0 and we have a client requirement that passwords must be stored using bcrypt with a cost factor of 10. We found out that auth0 does use bcrypt for hashing passwords but we were not able to find the cost factor that auth0 uses by default. Can someone please let us know what’s the cost factor of bcrypt used and if it is not 10 is there a way to change it?
Welcome to the Community!
I found an internal request from May 25th that confirms we hash with 10 rounds.
Hope that helps,
This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.