title: How To Secure Encrypted Password Even The Weakest One?
body: <p>I am always looking for ways to secure my user's passwords. I am currently using some combination of hashing algorithm with random salt.</p>
  
  <p>The main thing in this problem is when my user set a very very weak password. No matter how hard my mixed-up hashing algorithm, and how long my salt is, I think it can be cracked in less than 1 year.</p>
  
  <p>I've been thinking for a new way. I've made a script that will re-encrypt the password every time the user sign-out by adding a random salt on the old hashed password, then encrypt it again. So, every time the user come back, the encrypted password is different. Get it?</p>
  
  <p>But the main problem on this idea is, I must store the new salt every time the user sign-out. Imagine my code will look like, if the user is sign-in and sign-out everyday?</p>
  
  <p>Any idea?</p>
  
  <p>Oh, I have an idea. How about regenerate new encrypted password every year?</p>