diff options
| author | GitLab Bot <gitlab-bot@gitlab.com> | 2020-04-04 12:09:16 +0300 |
|---|---|---|
| committer | GitLab Bot <gitlab-bot@gitlab.com> | 2020-04-04 12:09:16 +0300 |
| commit | 7ea6cb331a8d50e201ef5da34dcfd62b93760c5b (patch) | |
| tree | 1a4145ef8500214150cd6b6c004d737016b1bdc0 /doc/security | |
| parent | e3bdfa1a13d7e6c92716324c78b5b20c07eeb7c6 (diff) | |
Add latest changes from gitlab-org/gitlab@master
Diffstat (limited to 'doc/security')
| -rw-r--r-- | doc/security/password_storage.md | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/doc/security/password_storage.md b/doc/security/password_storage.md index f4e32f96f7b..96487a75d8d 100644 --- a/doc/security/password_storage.md +++ b/doc/security/password_storage.md @@ -6,7 +6,7 @@ type: reference GitLab stores user passwords in a hashed format, to prevent passwords from being visible. -GitLab uses the [Devise](https://github.com/plataformatec/devise) authentication library, which handles the hashing of user passwords. Password hashes are created with the following attributes: +GitLab uses the [Devise](https://github.com/heartcombo/devise) authentication library, which handles the hashing of user passwords. Password hashes are created with the following attributes: - **Hashing**: the [bcrypt](https://en.wikipedia.org/wiki/Bcrypt) hashing function is used to generate the hash of the provided password. This is a strong, industry-standard cryptographic hashing function. - **Stretching**: Password hashes are [stretched](https://en.wikipedia.org/wiki/Key_stretching) to harden against brute-force attacks. GitLab uses a stretching factor of 10 by default. |