hashing a password is not acceptable

[chase-moskal]

tom-md's reddit comment (#1):

Hashing a password is not an acceptable way to create a crypto key from a password. Use something like scrypt. Generate a random salt for the encrypt operation to use in scrypt and store it with the ciphertext (along with the IV, payload)

ehochx adds this in a reddit comment:

Don't hash the password, generate a random salt and use a proper KDF

RenThraysk adds this:

Password hashing, WebCrypto has PBKDF2 which is more suitable.