paveltimofeev/password-hash-strategies.md

Last active June 7, 2016 08:18

Star (0) You must be signed in to star a gist
Fork (0) You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/paveltimofeev/73a17ba88ee79ba54712f465c858aa88.js"></script>
Save paveltimofeev/73a17ba88ee79ba54712f465c858aa88 to your computer and use it in GitHub Desktop.

Download ZIP

Good storing passwords' hashes strategies

Raw

password-hash-strategies.md

Good storing passwords' hashes strategies

Do not store users' passwords in plain text, store hash of password instead. But only hashing is not enough, use one of these techniques, to make your users' data more protected:

simple way:

passwordHash = hash( hash(passwd) + salt )

better one - will produce different hashes for users with the same passwords:

passwordHash = hash( hash(userid) + hash(passwd) + salt )

another one - salt is a random value for each user

passwordHash = hash( hash(passwd) + salt(userid) )