plataformatec/devise — Issue #1610: No salt in 2.0
Author: thelucid
Created: 2012-01-28 17:32:12+00:00
State: open

I've just noticed after creating a new Rails 3.2 app with Devise 2.0 that there is no longer a salt column by default. I've noticed the addition of the :encryptable option but shouldn't there be salt by default? I would have thought that having salt be me a more secure default.

Am I missing something i.e. is the default bcrypt inherently more secure without salt?