password_guard 1.0.5

A secure, developer-friendly password hashing library for Dart and Flutter supporting Argon2id, bcrypt, and PBKDF2 with OWASP-recommended defaults.

1.0.5

• Prioritize banned password checks in PasswordPolicy so disallowed passwords fail validation immediately before complexity checks.

1.0.4

• update the changelog.

1.0.3

• Fix Web/WASM platform compatibility by decoupling dart:isolate using conditional imports
• Resolve MIT License detection with standard SPDX text

1.0.2

• Correct LICENSE file format to ensure recognition by pub.dev and GitHub classifiers

1.0.1

• Fix pub.dev license recognition by adding the LICENSE file
• Optimize package description and keywords for search visibility

1.0.0

• Initial release
• Argon2id password hashing (OWASP recommended defaults)
• bcrypt password hashing (cost factor 12 default)
• PBKDF2-HMAC-SHA256 password hashing (600,000 iterations default)
• Auto salt generation (16 bytes, Base64)
• Pepper support via inline string, EnvPepperProvider, MemoryPepperProvider
• Self-contained encoded hash format ($pg$<algorithm>$v1$<params>$<salt>$<hash>)
• Password verification with constant-time comparison
• Password migration detection (needsRehash)
• Password strength checker (score 0–100, StrengthLevel enum, suggestions)
• Password policy validation (min/max length, charset rules, banned passwords)
• Secure random utilities (SecureRandom.bytes, .base64, .hex)
• Full exception hierarchy (PasswordGuardException and subtypes)
• Zero Flutter dependency — works in any Dart runtime
• State management agnostic API