Adding Salt to Hashing: A Better Way to Store Passwords

[@cryptoninjapay]

Love how you broke this down into easy to understand terms. Great explanation!

[@WillJohnsonio]

Thank you!

[@SmallvilleJW]

This was an awesome explanation. Thank you for making things easy to understand! Great job 😎

[@WillJohnsonio]

Thanks!

[@ash_tray_6]

Man, this video is awesome hahaha your shadowboxing had me laughing out loud. Also holy crap your production quality and visuals are top tier. I can't imagine how long this took. Definitely the most clear and easy to understand video I've seen on hashing, you explained all the concepts in a human way, and not like a robot way lol. Instant sub! Great job

[@OktaDev]

Thanks for watching and subscribing! Glad to hear this video was helpful for you. If there are other subjects you'd like to see covered let us know!

[@kacy6014]

Best explanation ever. Only thing I would add is that you can append the salt to the hash, then store that in the db. That way you don't need a separate salt column in the db.

[@WillJohnsonio]

Great point!

[@heyt54]

Either way, if the attacker gets the DB he also has the salt for each user. What the point then to use a salt, unless you keep it _separate_?

[@r3jk8]

excellent video! every programmer should be required to watch this video!

[@OktaDev]

Thanks for the feedback! We're happy to hear you found it helpful.

[@theisegeberg]

Nice to get some things that I was "sort of sure that's how it is" hammered in. Great video, and great pacing.

[@OktaDev]

Thanks for your feedback! We'll be creating lots of more content like this to cover more identity and security concepts :) Please subscribe to our channel if you'd like to see more.

[@WillJohnsonio]

Thank you!

[@ezcreations777]

this was great! Thanks so much for being a good teacher Will

[@Mister2023-e7f]

good work, just wanted to watch part of the video and watched until the end

[@panteliskaramolegkos2693]

...and this is how educational content should be made

[@stringpicker81]

Informative and actually quite entertaining to watch!

[@dominuskelvin]

Awesome tutorial Will

[@OktaDev]

Thanks for watching!

[@WillJohnsonio]

Thank Kelvin!

[@user-cc8kb]

Great explanation! Thanks

[@MuddazC]

Informative and educational 😊

[@mihirsawant8817]

Spring Security in Java Ecosystem right, its not for js I think

[@iBasskung]

Nice info! Thanks so much.

[@OktaDev]

Thanks for watching!

[@NikhilChandel-xy2sw]

can Auth0 provide user level resource access control overriding existing roles/permission hierarchies..just because we don't want to create too many roles&permissions

[@pifele]

Very nice video, thnx!

[@OktaDev]

Glad that you enjoyed it! Thanks for watching!

[@devin7161]

Great Video

[@OktaDev]

Thanks!

[@clcl18cl18]

Well done video and cool looking guy🙂

[@OktaDev]

😎 Thanks!

[@christianwunder7396]

Thank you for this!

[@lessermook7608]

nice work

[@OktaDev]

Thanks!

[@JasDosanjh-mj9co]

you said the salt is stored in plaintext?

[@sabuein]

Thank you.

[@OktaDev]

You are welcome. Thanks for watching!

[@ricardotrejoruiz5776]

I don't understand how a salted password with random salt can match the saved hash on database.

[@WillJohnsonio]

Great question! The salt should be stored with the hashed password When the checking the entered password the salt is grabbed and added to the entered password The stored salt is added to the entered password then hashed and compared to the hashed password in the database. Does that help?

[@ricardotrejoruiz5776]

@@WillJohnsonio oook, kind regards :)

[@renmin114]

Happy me the 100th up😂

[@OktaDev]

haha! Team work makes the dream work!

[@minjon56]

🔥👏 Thanks for sharing 💙