Home/ Questions/Q 915445
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-15T17:53:18+00:00

I see in the config/initializers/devise.rb, there is a configuration called config.stretches. # ==> Configuration

  • 0

I see in the config/initializers/devise.rb, there is a configuration called “config.stretches”.

# ==> Configuration for :database_authenticatable
# For bcrypt, this is the cost for hashing the password and defaults to 10. If
# using other encryptors, it sets how many times you want the password re-encrypted.

config.stretches = 10

I don’t understand what does the stretches mean. It says it is the times I want the password “re-encrypted”. Why and we the password will be re-encrypted? And why I should specify a “times”?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    The short answer is that it makes brute force dictionary attacks take longer.

    This blog post is written in reasonably plain English, and might give you a better idea of what’s going on.

    • 0