I was curious based on your personal/professional opinion what is the best way to do password authentication?
I see so many different ways of handling users' passwords from salts hashing etc. and I wanted to know what you guys would do.
About: Web developer & Software engineer with a focus in building tools for content creators
I was curious based on your personal/professional opinion what is the best way to do password authentication?
I see so many different ways of handling users' passwords from salts hashing etc. and I wanted to know what you guys would do.
I am more asking what is the best option within hash & salt because their are many algorithms some better than others
I have seen this code project article also posted on crackstation.net/ (which currently seems to be having problems with their SSL) - and while I'm not a security expert - it seems to me that they are doing a pretty good job explaining it.
Best option: Login using google/facebook.
Second best: Hash and salt.
Bad: Encrypt
Never: plain text.