What's the best way to store passwords? Should you have an encrypted or hashing password for the user table?
What do you like, and why? Can you please provide an example of secure password storage?
In view of the password, check / head / / which are often ( They
/ P> Generally done:- When a user registers, then he typed in his (new) password)
- That password is + hash , And the result is stored in the database
- Then, when a user wants to log in, he typed his password
- What is piped is the salt + hash, and compared to the value stored in the database.
Main is key: Never store real password in DB - only one Hush;
And it seems that this is already what you are doing - a good issue for you; -)
Which hashing function should be used? Well, Sha 1 is often considered okay; MD5 is okay now; Sha512 should be more than fine, I guess.
Comments
Post a Comment