title: How is Bcrypt better than md5 + salt?
body: <p><em>Please read the updates too since my "actual confusion" is in there.</em></p>
  
  <p>It has been quiet sometime, since Joomla! started supporting the <code>bcrypt</code> hashing algorithm, alongside the <code>md5 + salt</code> that has been the defacto since Joomla! 1.5.</p>
  
  <p>Now my question is "As an end user, what benefits do I get if I start using <code>Bcrypt</code> right away, In comparison to the current algorithm viz. <code>MD5 + salt</code>? Does it even make any difference for a normal blog with a few hundred visitors daily?"</p>
  
  <p><strong>Update:-</strong></p>
  
  <p>Also I read somewhere that due to the speed of <code>md5</code> hashing,  My password could be easily calculated in a matter of days/months @ most.</p>
  
  <p>But does this not require my hash to already be present with the attacker to compare to?
  And If he/she doesn't have the hash in the first place, then how does the hashing algorithm that I use, affect my sites security? And eventually he ends up having to Brute Force my login page anyways?</p>
  
  <p>And if its down to Brute Forcing their way through, then isn't <code>Bcrypt</code> equally vulnerable to password guessing?</p>