Plain is headed towards 1.0! Subscribe for development updates →

plain.password

Password authentication for Plain.

 1# The number of seconds a password reset link is valid for (default: 3 days).
 2PASSWORD_RESET_TIMEOUT: int = 60 * 60 * 24 * 3
 3
 4# the first hasher in this list is the preferred algorithm.  any
 5# password using different algorithms will be converted automatically
 6# upon login
 7PASSWORD_HASHERS: list = [
 8    "plain.passwords.hashers.PBKDF2PasswordHasher",
 9    "plain.passwords.hashers.PBKDF2SHA1PasswordHasher",
10    "plain.passwords.hashers.Argon2PasswordHasher",
11    "plain.passwords.hashers.BCryptSHA256PasswordHasher",
12    "plain.passwords.hashers.ScryptPasswordHasher",
13]