Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Possible Duplicate:
How to securely hash passwords?

What is the best encryption algorithm? MD5, SHA1, SHA2 or maybe something else? Can you explain me why?

share|improve this question
1  
Did you browse existing questions, notably those with tags hash, passwords, password-management? –  curiousguy Jul 17 '12 at 6:14
3  
This is like the most-FAQ of this website. Please review How to securely hash passwords? and Password Hashing add salt + pepper or is salt enough?, and possibly others password and hash related questions. –  curiousguy Jul 17 '12 at 6:36
    
Sorry, I'm newbie on StackExchange. –  rubydev.ru Jul 17 '12 at 9:54
add comment

marked as duplicate by Lucas Kauffman, Rory Alsop Jul 17 '12 at 14:19

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

1 Answer

up vote 3 down vote accepted

You shouldn't just use plain hashing algorithms anymore. It's not secure because it's become exceedingly easy to brute-force traditional hash algorithms that were designed for speed.

Instead use an adaptive hash algorithm like bcrypt. This is currently the standard secure way to store hashed information, including passwords. It contains implementations in most major programming languages, so it's often just as easy (if not easier) than implementing a hash strategy yourself.

share|improve this answer
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.