Is Argon2id always superior to PBKDF2-SHA-256?

I’m really glad to see that Argon2id encryption is in the process of rolling out to Bitwarden! :partying_face:

However, is using Argon2id always superior to the existing PBKDF2-SHA-256? Are there any circumstances where it makes sense to keep PBKDF2-SHA-256?

1 Like

It‘s usually always superior, but if you need to comply with FIPS, PBKDF2 is your only choice.

1 Like