REQ-NFR-012

Passwords (if stored) hashed with modern KDF (Argon2id or bcrypt)

ID: REQ-NFR-012
Category: Non-Functional Requirements
Status: approved
Priority: P0
Created: 2026-05-10T18:01:18.940Z
Approved: 2026-05-10T18:03:07.162Z
Updated: 2026-05-10T18:03:07.162Z

What

Passwords (if any are stored) SHALL be hashed with a modern KDF (Argon2id or bcrypt).

Acceptance

Code review confirms.

Category

Security.

established project management guidelines Mapping

Primary Knowledge Area: Risk Management
Secondary KA: Quality Management
Primary Process Group: Planning
established project management guidelines Deliverable: Risk Management Plan

Strong password hashing mitigates credential-database compromise risk.