Saving Password Using Md5

Question

I use Postgresql, hibernate and Java, and I need to save the password. Can someone tell me how to encrypt a password using md5. Else is the best way to store a secure password in a database

thank

Answer 1

You should not use md5 to hash passwords. It is built for speed, which facilitates the attack. Use bcrypt instead . In addition, you should not try to decrypt the password after saving it. See the Examples on the bcrypt page for password verification with user input. Learn more about how to safely store passwords.

jBcrypt is also very easy to use. This is how you enter the password:

BCrypt.hashpw(password_from_user, BCrypt.gensalt());

And check this out:

BCrypt.checkpw(password_from_user, hashed_password_from_database)

Answer 2

MD5 is not an encryption algorithm - it is a cryptographic hash function. This is a completely different matter! You can save the hashed password in the database, but you cannot (generally) recover the password from the password hash. This is by design.

- , , . rainbow table . , salt ( PBKDF2), .

, MD5 , . , SHA-256.

Answer 3

, ( ) . . , , .

MessageDigest Java . : MD5- Java.

: , , , MD5. , , ( ). MD5 .

Answer 4

1) MD5.
2) MD5 - , , .
3) MD5 .
4) MD5 , .
5) MD5 , . (++, vb.net, VB6, #, php...)

Answer 5

postgres, pgcrypto.

:

update ... set passwordhash = crypt('new password', gen_salt('md5'));

, !

As others have pointed out, this might be a bad idea, depending on what you are trying to do. I was forced to use MD5 before because another application required it, but you do not want to pass this hash to the world.

Answer 6

I found the Jasypt encryption library to be quite useful.