Our application needs to store a password in a database. It‘s not possible to store a hash because the password is needed to access other data that are protected by this password.
Currently, the password is stored encrypted with a key that is part of the code. We are aware that there is no way to store the password in a 100% secure way, but what would improve security and why? For example, would a salt add security?
- The password is originally entered by a user into the application
- Access to the password is required in non-interactive mode (so cannot be unlocked by a user)
- Only solutions on the application level can be applied