# Password Hashing PBKDF2 vs Argon2
**URL:** https://meta.discourse.org/t/password-hashing-pbkdf2-vs-argon2/99056
**Category:** Development
**Created:** [10월 8, 2018, 11:28오후 UTC](https://meta.discourse.org/t/password-hashing-pbkdf2-vs-argon2/99056 "2018-10-08T23:28:58Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@mikymora](https://meta.discourse.org/u/mikymora)
#### Post date: [10월 8, 2018, 11:28오후 UTC](https://meta.discourse.org/t/password-hashing-pbkdf2-vs-argon2/99056/1 "2018-10-08T23:28:59Z")
I was reading about password hashing and came across this
[What is the most reliable, safe and efficient password hashing algorithm as of 2018?](https://www.quora.com/What-is-the-most-reliable-safe-and-efficient-password-hashing-algorithm-as-of-2018)
if Argon2 is the best and most secure password hashing method, then why is Discourse using **PBKDF2**?
or am i missing something.
---
### Author:  [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [10월 8, 2018, 11:39오후 UTC](https://meta.discourse.org/t/password-hashing-pbkdf2-vs-argon2/99056/2 "2018-10-08T23:39:25Z")
It takes a while for new hashing methods to be proven safe and reliable.
We do have a longer term todo to add a hash version so we can increase difficulty here in the future.
See: [Hacker, Hack Thyself](https://blog.codinghorror.com/hacker-hack-thyself/)
---
### Author:  [@mikymora](https://meta.discourse.org/u/mikymora)
#### Post date: [10월 9, 2018, 12:02오전 UTC](https://meta.discourse.org/t/password-hashing-pbkdf2-vs-argon2/99056/3 "2018-10-09T00:02:21Z")
That’s a nice explenation thank you,
I was just curious because in a other post i found that PBKDF2 came in the last position
[How to Safely Store Your Users’ Passwords](https://paragonie.com/blog/2016/02/how-safely-store-password-in-2016)
- **Argon2** , the [Password Hashing Competition winner](https://password-hashing.net/).
- **bcrypt**
- **scrypt**
- The other Password Hashing Competition finalists ( **Catena** , **Lyra2** , **Makwa** , and **yescrypt** )
- **PBKDF2** (nearly everyone except FIPS agrees PBKDF2 is the worst of the acceptable options but is still acceptable)
but thats probably outdated now.
---
### Author:  [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [10월 9, 2018, 12:05오전 UTC](https://meta.discourse.org/t/password-hashing-pbkdf2-vs-argon2/99056/4 "2018-10-09T00:05:38Z")
It depends how many iterations you use. “Worst” is relative, you _must_ know the number of iterations in use. Otherwise you are literally comparing 🍎s and 🍊s