Looking to store usernames and passwords in a database, and am wondering what the safest way to do so is. I know I have to use a salt somewhere, but am not sure how to gene
If you have enough control over both endpoints of the application, the absolute best way is using PAK-Z+.
(Edited: the original version recommended SRP but PAK-Z+ has a proof of security.)