It's suprisingly hard to find concrete information about that topic. I've worked with the Flask framework lately and I just managed to create a proper login that stores the passwords in a database after hashing them. While reading about this topic the following question came to my mind. What technology is used to build properly secured web applications like e banking platforms? Could you build something like that with Flask or is there a similar technology that is much safer?
closed as too broad by Xander, Bacon Brad, Jedi, Xiong Chiamiov, TheJulyPlot Jul 27 '17 at 7:09
Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.
This question is broad and likely won't attract a quality answers.
But here we go...
By applying the industry best-practices across all layers of your application, using well-maintained frameworks/libraries, and by actively performing penetration testing on your application- you can achieve a secure posture and consider your application secure.
It all depends on your use-case. If you are looking into building something with Flask, that is only one layer of the entire system (the web application framework). Between your web application and the user, you will have a web server technology, HTTP/HTTPS protocols, encryption technologies (SSL/TLS), and client side security risks (XSS, XSRF, un-trusted data tampering, etc...).
Each of these layers increase the probability of security vulnerabilities. Nothing can be 100% secure- including banking applications.
If you are in (or looking to be in) the business of creating a very secure application, then you will want someone with dedicated security expertise available to provide subject matter expertise on all aspects of the system build.
Unfortunately, there is no one-size-fits-all answer to security. If there was, there would probably exist a one-size-fits-all hacking tool.
I just managed to create a proper login that stores the passwords in a database after md5 hashing them
No, you didn't...
What technology is used to build properly secured web applications like e banking platforms?
Could you build something like that with Flask?
Maybe, if you're careful and can find quality libraries or build your own
The correct way to store passwords is to use a slow, cryptographic hash like bcrypt, scrypt, or PBKDF2