Hashing vs. Encrypting Passwords

前端 未结 4 902
刺人心
刺人心 2020-12-03 16:42

I\'m using ASP.NET membership for a site that will serve primarily sophisticated users. I understand the difference between hashed and encrypted passwords, and I\'m trying t

4条回答
  •  無奈伤痛
    2020-12-03 16:47

    The risk is, that encrypted passwords can be decrypted to get the plain text password.

    Hashes normally can't be reversed.

    Reversing an MD5 Hash

    A quite common occurance is people using the same username and password on all their internet sites.

    All it takes is one site password to be decrypted, and all the users sites are at risk.

    While with a hash, the cracker never gets the plain text password.

提交回复
热议问题