Storing Credentials securely

• Gary Dale

  Old Hand

  Points: 345

  More actions

  July 29, 2005 at 7:46 am

  #363352

  I need to be able to store user credentials in the database I'm looking after (SQL Server 2005 and it's use is being extended through IIS web services) securely.

  What is best practice for encrypting passwords, storing them and then being able to compare hash's to determine if a set of credentials are in fact valid?

  Anyone have any examples they'd be willing to share?

  Regards

• Roy Rogers

  SSCertifiable

  Points: 7712

  More actions

  July 29, 2005 at 7:54 am

  #578187

  If you are using ASP.NET use

  System.Security.Cryptography class library to encrypt and decrypt the credentialls.

  Regards,
  gova