DEV Community


Discussion on: Things you wanted to know about storing passwords but were afraid to ask

ruidfigueiredo profile image
Rui Figueiredo Author

That's not how hashes work.
Anyway if you have time I recommend reading how password storage is done in ASP.NET Identity. Looking at a concrete example might help.

Thread Thread
rlipscombe profile image
Roger Lipscombe

Slava's asking how to securely store the user's password so that his app can then talk to another app as if it were that user. On that user's behalf.

Because the other app needs the user's password, he needs some way to store and retrieve the user's password.

It's tangential to the discussion here.

Slava, you need to look to see if this "other app" has some other way to allow users to delegate access. This is where OpenID and OAuth, etc., come in.

Thread Thread
slaffik profile image
Slava Abakumov

I use OAuth2 when possible, but it's not always the case. I have to support this old-school insecure way, so trying to be less evil by searching the way to improve the password storage.