On 15 Dec 2015, at 10:19, Stephan Eggermont <stephan@stack.nl> wrote:

Instead of the really unsafe password: thing, perhaps use

hashPassword: aString ^GRPlatform current secureHashFor: aString

password: anObject passwordHash := self hashPassword: anObject

verifyPassword: aString ^(self hashPassword: aString) = self passwordHash.

passwordHash passwordHash ifNil: [ ^'' ]. ^ passwordHash

That last method is not needed, since 'any string' = nil is false, right ?