Take the 2-minute tour ×  I am always looking for ways to secure
my user's passwords. I am currently using some combination of
hashing algorithm with random salt.  The main thing in this
problem is when my user set a very very weak password. No matter
how hard my mixed-up hashing algorithm, and how long my salt is,
I think it can be cracked in less than 1 year.  I've been
thinking for a new way. I've made a script that will re-encrypt
the password every time the user sign-out by adding a random
salt on the old hashed password, then encrypt it again. So,
every time the user come back, the encrypted password is
different. Get it?  But the main problem on this idea is, I must
store the new salt every time the user sign-out. Imagine my code
will look like, if the user is sign-in and sign-out everyday?
Any idea?  Oh, I have an idea. How about regenerate new
encrypted password every year?  share|improve this question Just
use a very long salt, or start enforcing standards on peoples'
passwords. –  Marcin Feb 27 '1