<@U04UQ68083H> What is the default password hasher...
# ory-copilot
g
@chilly-king-10285 What is the default password hasher if no specific config is provided ? Documentation says it's bcrypt but looking at the code it seems the default is argon2
c
A message from kapa.ai
According to the official Ory documentation, the default password hasher for Ory Kratos is BCrypt if no specific configuration is provided: > Per default, passwords are hashed using BCrypt. You can configure the BCrypt hasher using the following options: > >
Copy code
> hashers:   >   algorithm: bcrypt   >
> > [Source: Passwords settings](https://www.ory.sh/docs/self-hosted/kratos/configuration/password) Additionally, the documentation for importing hashed passwords also states: > By default Ory uses a password policy that follows the [Digital Identity Guidelines](https://pages.nist.gov/800-63-3/) established by the [National Institute of Standards and Technology (NIST)](https://www.nist.gov/). > > [Source: Password policy](https://www.ory.sh/docs/kratos/concepts/security#password-policy) There is no mention in the provided knowledge sources of Argon2 being the default hasher unless it is explicitly configured. If you are seeing Argon2 as the default in the code, it may be due to a recent change not yet reflected in the documentation, or a specific context in your codebase. Based on the documentation, BCrypt is the default unless otherwise specified.
s
Kapa doesn't (yet) index our code. This is where we set the default, it is a bit complex with all the configs and stuff in the codebase: https://github.com/ory/kratos/blob/199f4e5b9d41d383e7c72d36a363a258cdb6aabc/embedx/config.schema.json#L2669
🙏 1