hashlib, hmac, secrets, bcrypt, Argon2 and passlib
Built-in hashing/HMAC and secure random tokens, plus password-hashing libraries.
Easy
Use secrets.token_urlsafe() for reset tokens — never random.
Spotted a mistake or want to add detail? Suggest an improvement — Content Contributors' edits are reviewed by editors before they go live.
Discussion (0)
Sign in or join free to ask questions and discuss this topic.