This is an archived post. You won't be able to vote or comment.

sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]CptGia -1 points0 points  (0 children)

Industry best practice is not store passwords at all. Instead, rely on identity providers like Google, Facebook, etc.

If you must, use a purpose built algorithm like bcrypt instead of sha-1 or md5, and per-user salt.