Hot answers tagged password-management
Don't hash the usernames. For passwords, hash them using something like bcrypt or PBKDF2. Read this ASAP for more (also contains example source code).
Good on you for trying to learn this. Keep in mind that whatever you produce shouldn't be put into an actual production environment even on the personal level. Consider this as a learning opportunity and not a recipe to cook your own password manager. Usually, you'd do something along these lines: Generate a random 256-bit key. This is your master ...
At least one way to look at this is to consider the strength and quality of the authentication offered at the target site against the Identity Provider (IDP) you intend to federate with. For example, consider if you have a choice between opening a new account with a plain old password (which you will store in your Password Manager app) vs. redirecting to ...
Your question is very vague and covers a number of areas. An example would be most helpful. Based on the title of your question, it seems you're interested in how to securely handle credentials that are required by an application. If this is a Microsoft environment one can encrypt sections of the web.config which is used to store sensitive information ...
Only top voted, non community-wiki answers of a minimum length are eligible