How to Hash Passwords in 2026: Argon2id, bcrypt and the NIST Baseline
Argon2id, bcrypt, scrypt and PBKDF2 compared: memory-hardness, OWASP baselines, NIST 800-63B rules, and the perennial mistakes.
Plex’s 15M Credential Leak: When Your Forum Post Becomes a Combo List
A forums database with bcrypt hashes and salts hit a criminal forum. The real blast radius was everywhere else users reused passwords.