Linked Questions

26 votes
3 answers

How secure are sha256 + salt hashes for password storage [duplicate]

I started reading about password hashing recently on multiple sites like this page on crackstation and others, and for what I have understood, I should avoid using hashing algorithms like md5 and sha1 ...
Yuran Pereira's user avatar
10 votes
5 answers

How is hashing safe if a given string always generates the same hash? [duplicate]

I am a newbie to hashing, and I understand that MD5 (I know it's broken) and SHA-1 are all fixed hashing algorithms, but given that most passwords are dictionary words or other similar passwords, what'...
msamogh's user avatar
  • 109
13 votes
5 answers

What is the purpose of slowing down the calculation of a password hash? [duplicate]

Why would you choose to slow down the calculation of a password hash?
Renee Pachan's user avatar
12 votes
2 answers

If multiple users on the same website all use the same password, is their password hash the same? [duplicate]

My basic knowledge would assume yes, unless websites somehow include the user name into the hashing function with the password, but I am not sure if this is common practice.
Just's user avatar
  • 121
7 votes
4 answers

Store password using sha1 [duplicate]

I've been using the sha1() function to hash password before inserting it into my database. But I have this procedure so that it just won't be the password to be hashed. My page would register a user ...
Logan Wayne's user avatar
2 votes
2 answers

which hashing algorithm is better to use to store a password, sha256 or sha512? [duplicate]

which hashing algorithm is better to use to store a password, sha256 or sha512? I know that sha512 is more secure than sha256 but I was wondering if it has some disadvantages or it is completely ...
Mo Haidar's user avatar
  • 439
0 votes
2 answers

Is my hashing method secure? [duplicate]

I use bcrypt (32 rounds) and once the hash is produced, I get the sha512 of that hash and I then hash that with blow fish and once that is done, I hash it again with sha512 with a salt that has been ...
sss's user avatar
  • 33
3 votes
7 answers

How to provide security for passwords stored in Database? [duplicate]

Passwords of end Users are stored in Database which is encrypted (using one way hash like MD5). Apart from me, there are 'other' people belonging to other teams who have access to Database which means ...
Vikas V's user avatar
  • 683
4 votes
3 answers

Is this a secure way of storing passwords? [duplicate]

So a couple years ago when I was learning basic back-end web development, I found a tutorial for creating a basic log in system. I haven't done much modification to the code since, but I have the ...
Meredith's user avatar
  • 248
1 vote
3 answers

How to decrypt a password for recovery with php [duplicate]

I have a website that people can sign up for and sign in to. I would like to implement a password recovery system that sends you the decrypted password. When the user signs up, the password is salted ...
DMVerfurth's user avatar
3 votes
2 answers

Which hashing algorithm is ideal for use on the web? [duplicate]

I am new here, and have poked around the site looking for an overview of which hash algorithm to use on the web and why. It seems to be the consensus that SHA-256 or other SHA-2 family algorithms are ...
JHS's user avatar
  • 152
2 votes
4 answers

Is using 100,000 iterations of sha256 good enough for password storage? [duplicate]

I am creating a web app, and I was wondering if it would be secure to use 100,000 iterations of sha256 for storing passwords? I know that there are algorithms such as scrypt and bcrypt, however, I was ...
Matt's user avatar
  • 29
7 votes
2 answers

Can you encrypt a password using that password itself? [duplicate]

Possible Duplicate: How to securely hash passwords? https security - should password be hashed server-side or client-side? I need to make a request to a web server, the only information I have ...
kwolbert's user avatar
0 votes
1 answer

Is this password hashing + salt method the most secure way possible? [duplicate]

I am just wondering what all the security experts think of my method for password hashing. I want to come up with a method I can use for all my future web development projects. First I create a ...
Professed3376's user avatar
7 votes
1 answer

Increasing the Calculation Cost of Hashing [duplicate]

Is this a secure way to increase the calculation cost of md5 or sha1? public static byte[] increaseHashComplexityMd5(byte[] hash, int loops) { for(int loop = 1; loop <= loops; loop++) { ...
Zwarmapapa's user avatar

15 30 50 per page
2 3 4 5