how to encrypt the password in asp.net during inserting into database and how to compare it during login?
+2
A:
I'd recommend
- encrypt in the client (don't roll your own)
- send and store it encrypted in the database as a hash
- on login, encrypt the incoming value and compare against the stored value
There is no need to store plain text in a database.
gbn
2010-10-01 17:15:56