The BEST Ways to Store Passwords in Your Database

[@codedamn]

If you liked this video, consider checking out codedamn.com - an interactive way to learn coding. Become a stellar full-stack developer learning to code interactively: cdm.sh/fullstack

[@akashdash6023]

random salt + hash, with a cpu intensive hash function like bcrypt

[@Anonymous-gt8zn]

This video is amazing.. now I understood why bcrypt is soo popular..

[@venkateshyadav368]

Nice video great Content

[@KeffelewAssefa]

Thank you

[@hassaanraheem56]

But in generally top mnc's uses combo of multiple hash functions.

[@smaranh]

Keep making these AWESOME videos

[@elamandeep]

bycrypt hashing algorithm or use auth0

[@bramlachat2515]

I watched this video till the end!

[@neontuts5637]

Nice video sir. Please can you make a video on Bcrypt. How to use in MERN Stack etc.

[@rajeev3147]

i watched this video till the end!

[@nicetomeetugaming7024]

Good video sir!

[@vijaychauhan.9134]

Very nice video 👍👍

[@guddetiajaymanikanta]

You are awesome.

[@suryapratimpaul]

I watched the video till the end and also watched ads.

[@vijaychauhan.9134]

Very nice

[@thegreatprogrammer5937]

I learnt today that even your own colleagues or employees can also do malicious stuff to your own product!

[@aswincg5895]

Do a video on Remix. Seeing many tweets about remix these days

[@2206arnab]

I’m thinking, what would be pros and cons of doing hashing in rounds like DES or AES? For example, if I MD5() a value for K times(say 8 or 16), wouldn’t that be extremely hard to break via brute force and faster than bcrypt() as well? Just thinking out loud. Not sure if it’s in the right track.

[@akhandpatel4873]

Adding multiple rounds, increases the complexity but that can be handled by using a lookup table. It is easier to create a lookup table in case of unsalted md5.

[@2206arnab]

@@akhandpatel4873 Yes it would increase the complexity, but isn’t bcrypt doing that as well? And coming to salts, what if someone encrypts the salt or maybe use multiple salts in multiple rounds of hashing?

[@akhandpatel4873]

You maybe right but in case of md5 the output range is 64 bits and in bcrypt it is much larger than that, and moreover in case of bcrypt, the calculation doesn't increase linearly with rounnd but rather exponentially. But i wouldn't say that rehashing md5 hashes would be worthless, but not as useful as bcrypt

[@2206arnab]

@@akhandpatel4873 understood. Thanks. I’ve never came across this kind of use case in real life, only studied them back in college. I usually go the OAuth way. But, yeah I’ll check on bcrypt a bit more. Thanks!

[@vijaychauhan.9134]

Super video 💯💯🤣🙂🙂😊👍😊😊👌

[@ujjwalsaxena6469]

But wouldn't using bycript to store password also increase the time taken by to authenticate the user (while checking password)?

[@codedamn]

It’s 100% worth it. It’s like saying we should not use https because tls handshake takes time

[@ujjwalsaxena6469]

@@codedamn Thanks :)

[@tibzdankan]

I watched this video till the end

[@chatarsinghchundawat4239]

I watched this video till the end.

[@pranavbhat29]

6:04 Should we also not guarantee that the hash function has as less collisions as possible? Or else two users might accidently have the same hash for their two different passwords

[@shadestorm3995]

why should that matter aslong as the user_id is different ?

[@neuideas]

Preventing hash collisions is one of the first things hash developers focus on. If collisions are easy, then it's not a valid hash algorithm. At best, it's a fancy checksum.

[@pastuh]

obvious social logins is best. Another way just send login confirmation to email

[@JarppaGuru]

1:50 it wont matter if ALL DATA is encrypted it random order based on something and multiple times. hacker cant know and hashes are pointless. hash multiple time and between new encryption reverse order and hash that hash with new method. hacker cant know there becouse too many variables, but developers are stupid. it only take millisend hash hash reverse hash reverse plit in midle hash lol but million years crack even know correct order

[@gofudgeyourselves9024]

Ajinkya rahane

[@yadneshkhode3091]

1 month pehle bana diya hota video toh interview clear ho jata

[@gmkhussain]

09:54 I am happy😊 as you *shout out me* 😋 although your hardwork is priceless but still it will help you as well as us.

[@abczwq8364]

too slow video

[@yashsharma6269]

I watched this video till the end!

[@andreas7181]

i watched this video till the end!

[@sazzadanwar4802]

I watched this video till the end.