Why should I care about hashing passwords anyway?

后端 未结 12 1006
南旧
南旧 2021-01-03 23:04

If a hacker has access to the hashes in my DB, he has access to the rest of the information in the DB anyways. So why would he bother trying to decrypt the passwords? Should

12条回答
  •  一个人的身影
    2021-01-03 23:18

    Should I be storing the passwords on a different server to the rest of my data?

    This adds complexity to your system, but if it's something you can do it's definitely an improvement.

    Note that using authentication servers such as Kerberos, RADIUS, or Windows domain authentication effectively put you passwords on another server.

提交回复
热议问题