passwords

Best practices for a Password Management System

I'm working on a password management system which stores the passwords of a bunch of services (gmail, bank of america account, youtube etc). The user will be able to launch each of these services by logging into my application. The application will then POST the username and password associated with that service to that service's login u...

return supported hash algorithms

i need a command or a script returning supported hashing algorithms (for hashing passwords) on a system, i mean algorithms can be used with pam.d configuration files or login.defs . generally md5,bigcrypt,sha256, sha512 and blowfish are supported but i need to programmatically check if new algorithm is supported and determine it in my s...

php, is there a safe way of stroing passwords in cookies?

hi, is there a safe way of storing passwords in cookies in php? or is it not recomended? thanks ...

Git on ubuntu machine with windows client

Hi, I keep getting an annoying popup that keeps asking me for a git password while accessing my git repo from another machine.I have no git password set up..Have referred various guides to setup git and have gone through the ssh pub/pri key setup.Any help would be appreciated Regards, Manish Narang ...

Verify if password is correct

i need to verify if the password is correct for a user. i have this code: private bool checkOldPasswordValid(string password, string username) { using (DirectoryEntry entry = new DirectoryEntry("WinNT://" + Environment.MachineName + ",computer")) { entry.Username = username; entry.Password =...

Store a Password Securely.

I need to "password protect" my application but need advice on where to store the password securely. How I intend to do this: The first time the program is run, I will prompt the user to create a password. The password will be salted and hashed in SHA-256 then stored in either the Registry or a file. The Problem: If I store the hashe...

checking the password in php?

how can i check if the password is more than 6 letters using php, this is for my registration form. :)) thanks ...

Set username and password to SQL Server Express database

I added a new database to my project before (SQL Server Express database). And now i decide to set username and password to my database file. (*.mdf file i mean). How can i do this issue? Thanks in advance. ...

Rails database - how to store encrypted data using the user's password?

I have a database that will be holding sensitive data, so it should be encrypted in the database. Basically the sensitive data are credentials to another web site. So I want to encrypt them with the users password + salt. To decrypt the credentials one would need the password. I see two ways: On login, I could decrypt the credentials...

How to use custom password character in c# textbox in web forms?

I found that PasswordChar works for windows form Textbox control in this purpose, but how can I do that in case of web form? Please help.thx ...

[.NET] Storing an encrypted password into a database

I thought this would've been a lot simpler but at this point I'm confused and haven't progressed at all. Basically, I need to be able to accept a password from a user in a WPF app, encrypt it then store this in a database and be able to decrypt later on. However I'm not sure how to implement this. This is completely trivial so whether...

Password hashing - how to upgrade?

There's plenty of discussion on the best algorithm - but what if you're already in production? How do you upgrade without having to reset on the user? EDIT/DISCLAIMER: Although I originally wanted a "quick fix" solution and chose orip's response, I must concede that if security in your application is important enough to be even bothe...

Program to automate reset of password on Windows Server

Program to automate reset of password on Windows Server I would like to be able to automate the reset of user password (and possibly change password to a default value) based on an email received from a user within the company For this I would require a program to change password account and a way to trigger a program based on an ema...

How to hide Zend's application.ini from the public?

I am using the Zend Framework for construction of my site, which uses the application.ini file to store database info (such as username and password). I discovered that typing /application/configs/application.ini in the web browser plainly shows all the contents of the applications.ini file. How can I prevent this? I tried setting the ch...

Storing settings and password in Java SE portably

How should I store program settings and saved password in a desktop Java SE program. Program uses jsch to connect to SSH and should manage passwords and keys. How to do it portably, without implementing separate solutions per OS? Is there a library which will, for example, store things at $HOME/.myapp on GNU/Linux, in registry or in u...

Populate password on the login page using MVC

I am implementing single sign on and i have the login name and password from the parent site and would like to insert this values in the login and password field of the child site. How can i do this in C#, MVC. as of now i am able to populate the login name using viewdata but i m unable to populate the password. ...

Is there standard way to generate Password Hash with Microsoft?

Is there standard way to generate Password Hash with Microsoft development tools? Or maybe there is most common way. (I have read that there is MD5, STA1) Unfortunately I don't have server's source code, but have to consume SOAP web-services. The must be some algorithm to generate hash code. I need to implement it using Java or using s...

IE7 regex issue - Regex that work in every browser does not work in ie7

I have a regex validating a password value to be > 6 < 25 characters with at least one number. var passwordRegEx = /^(?=.*\d)(?=.*[a-zA-Z]).{6,25}$/; if(!#quickRegister_Password').val().test(pass)) { errorMgs += 'Your password must be at least 6 characters and have at least 1 number and 1 letter.\r\n'; } It works in Firefox, Chrome...

Demystifying Web Authentication

I'm currently researching user authentication protocols for a website I'm developing. I would like to create an authentication cookie so users can stay logged in between pages. Here is my first bash: cookie = user_id|expiry_date|HMAC(user_id|expiry_date, k) Where k is HMAC(user_id|expiry_date, sk) and sk is a 256 bit key only known ...

Should the Salt for a password Hash be "hashed" also?

Hello This I think may be a silly question, but I have become quite confused on what I should do here for the best. When salting a password hash, should the salt also be hashed or left as plaintext? NOTE: I am hashing a password in SHA-256 and the Salt is a pre defined string as only one password will ever be stored at a time. TIA C...