Hiiiii,

           i need to encrypt a password and has to save it in sql server.if any know this please help me its very urgent.

                                Thanks in advance,

Regards,
harsha

Hi varsha,

I hope when u want to save passwords in SQL Server, then no need to encrypt them. Bcoz only admin can handle the database. How ever if u want to save user names & passwords in web.config then it will be necessacary. Now the days there r several algorithms so that u can encrypt ur password like DES or Tripple DES. .NET also gives builtin SHA1 & MD5algo.

First suppose u r saving ur passwords in web.config,
<credentials passwordFormat="SHA1" >
<users name=first password="25FDHS252GF5HGF58RT2H5">
</credentials>
For generating the password u will use a seperate procedure HashPasswordForStoringInConfigFile() of FormsAuthentication Class.

u can use it as;
strhashValue = FormsAuthentication.HashPasswordForStoringInConfig File(txtPassword.Text,"SHA1" or "MD5");

I hope, now u hav a good idea about it.

Regards,

Anuj Rathi

It is a good practice to encrypt your data...even if your storing it in a Database. Living under the premis that "You dont need to encrypt passwords because only the admin can handle the database" is truly giving you a false sense of security.

Harshaghanta: Remember that MD5 is a one-way encryption, e.g., there is no easy way to convert the encrypted string back into plain text. For slightly less sensitive data you could also opt to use a Base64 encoded string.

"The one language all programmers understand is profanity."

Exactly. Imagine a conflict with your DBA that threatens to steal your database if you fire him / her??

Security is not just about keeping people out. It's also about keeping data safe from people at the inside....

Imar
---------------------------------------
Imar Spaanjaars
Everyone is unique, except for me.
Author of ASP.NET 2.0 Instant Results and Beginning Dreamweaver MX / MX 2004

There is a good article on encrypting passwords for databases here: http://aspnet.4guysfromrolla.com/articles/103002-1.aspx
and an expansion on that theme here: http://aspnet.4guysfromrolla.com/articles/112002-1.aspx