Menu
I am writing a .net(C#) windows application to store user passwords in it, like keypass, lastpass, roboforms etc.
To process the user data i have to keep it in memory this data also contains Passwords of the user.
Now my Questions are:
Thanks
213
Hash all passwords Never store passwords in plain text. Always create a hash from them and store the hash instead. In password storage, hashing is superior to encryption since a hash can't be reversed.
Password management is a set of principles and best practices to be followed by users while storing and managing passwords in an efficient manner to secure passwords as much as they can to prevent unauthorized access.
The main storage methods for passwords are plain text, hashed, hashed and salted, and reversibly encrypted. If an attacker gains access to the password file, then if it is stored as plain text, no cracking is necessary.
You are correct in your concerns, strings in memory are not safe.
You're probably looking for the SecureString class.
194
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With
