New answers tagged

1

The original answer was based on a wrong assumption, since I haven't followed the link provided in the question. I edited the answer now, but kept the original version at the bottom, since it may be helpful. Talking about the wide usage, I would assert that a similar system exists in nearly every website under a form “I forgot my password”. Using ...


4

Don't store the password anywhere at all. Instead, derive a key from it and use that key to decrypt the file. You can store a sentinel string at the beginning of the file and check for it after decryption. If the sentinel is not there, the provided password was wrong or the file has been corrupted. The value of the sentinel need not be kept secret. Storing ...


1

You should never store a password or hash mask (or salt) directly in your code. For the reason you already stated: someone will decompile your code to source. Then they will have the password. A Couple of Simplish Ways You can run your password through a one way hashing algorithm and save the results of that somewhere (maybe in a database). You could ...



Top 50 recent answers are included