diff --git a/pkg/password/pwd.py b/pkg/password/pwd.py index 322d410..1b7cd59 100644 --- a/pkg/password/pwd.py +++ b/pkg/password/pwd.py @@ -56,4 +56,4 @@ class Password: 100000) pwdhash = binascii.hexlify(pwdhash).decode('ascii') - return pwdhash == stored_password \ No newline at end of file + return secrets.compare_digest(pwdhash, stored_password) \ No newline at end of file