A hash function deterministically transforms input data into an output designed to make recovering the original input impractical. In Spring Security, hashing is applied where protected data is stored, especially passwords. section 4.3 section 1.1
Use hashing as part of an explicitly configured security design:
- Select a suitable hashing implementation through PasswordEncoder when implementing authentication logic. section 4.3
- Add and configure the required component wherever stored data needs hashing; Spring Security supplies the contract, not the application-specific design. section 1.1
- Keep hashing distinct from encryption: encryptors support encryption and decryption, while hashing is listed among the data-protection choices. section 4.3 section 1.1















