Do I really need hash passwords?

I am creating a project that has a fairly basic login system. NO REGISTRATION is not available, users will be added manually. I also very well protected the input data. After all, do I still need to hash and even salt user passwords?

And if your answer is yes, the next question is: why?

+5
source share
10 answers

If you create a password for each user and do not allow the user to change the password, then you can do something not to hash them.

However:

  • You will need to explain to everyone who checks the system why you are not hashing passwords.
  • - , , .
  • , , .
  • , - .

, .

, , , .

( , .., )

+7

, , ? ( ) .

, , , , , , . ( ), .

+11

. , - .

+8

/ . - , , , , , , , . . , , , , , , , .

+5

, - , , .

" ", - 100% . - , , - . , , , , .

+2

, , , , , .

+2

, . , , .., .

+1

. , , . , .. . .

+1

? , , . , / /, , . / , , , , .

+1

.

, / .

0
source

All Articles