Is built in ASP.NET Membership Hashing good enough?

Question

I'm just wondering if the built in Hashing in the ASP.Net membership good password security, or if there is more that I should do to protect my passwords? If so, what should I look into for a higher level of security?

Answer 1

The hashing method with salt is pretty good. However how good the security is also depends a bit on how secure your application has to be.

Probably not good enough for securing bank accounts, hangar 18 projects or medical profiles. But yes good enough for your average company website or local sport club.

Answer 2

ASP.NET Membership uses standard .NET hashing algorithms from System.Security.Cryptography namespace. I thinks that's enough for many web solutions.