Dear all,

I have developed an application which allows user to register and there by choose their own userid and password.

As of now i'm capturing the password field in plain text and also storing the password in the database as plain text.

I want to encrypt the password, store in database and fetch the password from the database, decrypt it and use it for comparision, so as to validate the user. please tell me how to make it possible.

If possible give some references.

Intellectuals solve problems but Genious avoid problems.

__________________
Intellectuals solve problems but Genious avoid problems.

Hi

Check the link below for assistance:

http://www.codeproject.com/useritems...MD5_TriDES.asp

Regards
Mike

Fortune favours the brave, so don't regret on missed oppurtunities.

The best way I've found to do this is to store a 1-way hash of the password.

There is a method within the forms authentication class: FormsAuthentication.HashPasswordForStoringInConfig File

http://msdn2.microsoft.com/en-us/lib...onfigfile.aspx

The idea is that when the user creates the account, you hash the password and store that. Then when they log in, you hash the password they entered, get the hashed value from the DB, then compare the two hashed values. Then you don't have to decrypt anything. This is actually more secure, because uses a hash algorithm instead of an encryption algorithm (which will have a matching decryption).

-Peter

Thanks a lot sir.

It worked. i used md5 hashing procedure.

Intellectuals solve problems but Genious avoid problems.

Simple method to hash password using MD5 can be found here http://www.ripplecreations.com/techn...md5-csharp.php



Mujahid Khaleel
Web applications and security