M
M
mysticmirage2011-06-30 20:12:52
User identification
mysticmirage, 2011-06-30 20:12:52

Storing unhashed passwords in a database

It was required to store passwords of users in a database.
The password is needed for authentication on a third-party service, so hashing is not suitable.
Tell me how to do it better?

Answer the question

In order to leave comments, you need to log in

2 answer(s)
V
Vas3K, 2011-06-30
@mysticmirage

1) Store session_tokens, unless of course the third-party service works through OAuth.
2) If not, encrypt with the key. Keep the key deep inside. So if the database is taken away, they will not decrypt it without the key.

A
Albertum, 2011-06-30
@Albertum

Store encrypted (symmetrically or asymmetrically).
Take care of the encryption key.
Decrypt before use.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question