Custom comparator for password type about sqlalchemy-utils HOT 2 CLOSED

Unless the password is stored in plain text (please don't), querying via the password field is too computationally complex to be useful in practice. In order to verify password == 'asdf', you need to iterate over every row in the database and perform the hash once for each row using their personalized salt. A good algorithm for long term password storage requires that the hashing algorithm is computationally complex enough that it takes a while to complete and uses a significant amount of resources (to make it non-parallelizable). If you have more than a few rows with password field, it will already take far too long.

from sqlalchemy-utils.

Hmm I honestly don't know what I was thinking when I added this ticket. Maybe too long workday or something :) Removed now.

from sqlalchemy-utils.