From the course: ASP.NET: Security

Unlock the full course today

Join today to access over 24,800 courses taught by industry experts.

Adding password hashing to the app

Adding password hashing to the app

From the course: ASP.NET: Security

Start my 1-month free trial Buy for my team

Adding password hashing to the app

“

- [Instructor] I have implemented a rather simple helper class which provides static methods to hash a password and to verify a password against a hash. So, I'm essentially storing the Hash and the Salt. Now, you could argue that you maybe should also store the number of iterations. This would be an idea for an additional refactoring of the app. So far, the number of iterations is constant and is always 10,000. Now, I'm using these two methods when I initialize the database. So, instead of just writing the passwords directly into the database, I'm hashing them. Of course, I could use the hashes here as well so I could precalculate them, but that way you just see how we can call the HashPassword functionality from here. In the User model, conveniently I already have the Salt and the Hash as properties, but I could and should get rid of the password. This change to the model will also lead to the situation that the…

Contents