Home/ Questions/Q 8047199
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-05T06:01:36+00:00

I have been using django-registration for my django applications(thanks to James Bennett ).I read

  • 0

I have been using django-registration for my django applications(thanks to James Bennett).I read some articles which spoke about the importance of using safe hash algorithms and using a salt for password hashing.. When I took a look at the source code of django-registration,I found that sha1 is used for creating activation_key

activation_key = hashlib.sha1(salt+username).hexdigest()

sha1 to my knowledge, is no longer a safe hash algorithm.
I was wondering if there was some way I could set the hash algorithm to be used .

what do you guys recommend?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    I recommend you re-examine what it’s being used for here. When used to store an unsalted password, SHA-1 is weak. When used with a salt to generate a not-quite-random identifier, it is fairly safe.

    • 0