I am writing a server-client program. When a new user installs the program and opens it for the first time, he has to enter a password. The password in combination with an email address is needed to authenticate to the server via SSLSocket.
I know how to save a password securely (store salt and hashed password), but how can I create a secure system, where the client automatically sends the password to the server? I do not want the user to type the same password every time he wants to login.
Is it possible to create a secure system like this? Because if I save the hashed and salted password in a .txt I can just read it and then login to the server? How is it possible to create something like this?
EDIT: My client opens an ssl socket to a server.
(1) Is it safe to send the plain password via SSL after opening the connection successfully? Or would you send the hashed and salted pw?
(2) Is it possible to store the password (either plain or hased) on client side?
I want the program to automatically send the pw hash to the server when it starts but it mudt be secure.