Skip to content

feat: Implement Password Security By Adding A Salt Before Hashing. #69

Description

@devstygian

Description

Enhance password security by adding a salt before hashing.

Expected Behavior

  • Generate a unique random salt for each user password.
  • Combine the salt with the password before hashing.
  • Store the hash and salt in the database.
  • Integrate under Account Management settings.
  • Why We Need Salt
  • Prevents attackers from using precomputed hash tables (rainbow tables) to guess passwords.
  • Ensures that identical passwords have different hashes, making database breaches safer.

Example:

  • Password: mypassword123
  • Salt: a1b2c3
  • Hash salt + password → store hash and salt
  • On login, combine entered password + stored salt, hash, and compare

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    PANEL SUGGESTIONSBase on panelist suggestion on capstone 1

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions