What's the Salt Length Used by Auth0

[lihua.zhang]

Problem Statement

When hashing passwords in Auth0, what is the length of the salt being used?

Solution

Auth0 uses Bcrypt to hash all the passwords. Bcrypt always uses a salt of length 16 bytes or 128 bits.