Where and how to store user data, passwords, logins?

Question

SQL

Good day.
Guys, please tell me where it is better to store user data - these are passwords, logins
. As I understand it, they should be collected in databases with MD5, for example, but where is it better to store this data so that they cannot be accessed?
upd: I asked the question incorrectly. The data is in the database, how to protect this very database and where to store it following the law 152-FZ on pers. data?
Thanks in advance!

Answer 1

Name, email, phone, password and more are stored in the database or in extreme cases in a regular .txt file.
Note! What the user enters in the password field (for example, 12345) is not recorded in the database. Create a hash of this password + salt. Read about salting passwords . At the output in your database, the password field should contain a hash (bdadb0330124cda0e8499c9cd118f7bd). If the user needs to log in, then you compare the hash that is obtained after entering the password with the one stored in your database.

Answer 2

Do not store passwords at all. Payment data - only if you created a phishing site.
Remain logins. You can keep them even in a notebook.

Answer 3

I will also express my opinion if you read, but did not understand the previous 4 different answers.
Logins - in the database
Passwords - nowhere

Answer 4

Logins in the database
Passwords in sha256, at least - in the database
You are not allowed to store payment / card data until you follow the pci dss standard