C# secure login

Question

I have been making basic forms applications in C# for a year or two now and have done some very basic log in forms (plain text passwords etc).

I am looking for a better, more secure option for security. I have looked and found some articles about .net membership and I have come across it before in other applications I have used. I feel that searching google sends me around in loops of why X is better than Y and also the resources are diluted by various reccomendations from 3-5 years + ago.

I am very comfortable with SQL and use Visual Studio Express for my development.

All I am looking for is a good resource / link to the most common authentication methods around. This site will eventually end up live on the internet so needs to be secure.

Thank you.

Answer 1

I use the ASP.NET Login Controls. There are other solutions, but this is one area (much like encryption) where I think you're better off not coding up your own solution - there are too many ways to fail.

See also What should every programmer know about security?