dancroak's Avatar
dancroak 3
5 Asked
30 Answered
12 Best
0
No one has voted on this question yet :(
2 years, 12 months ago

Which is a better encryption algorithm for user passwords? SHA1, SHA2, MD5, BCrypt, or something else? Typical web application.

Tip for best answer: M$0.25
Separate topics with commas, or by pressing return. Use the delete or backspace key to edit or remove existing topics.

You can leave an optional "tip" with Mahalo's virtual currency, Mahalo Dollars. If you are asking a difficult question that might require some research, or if you'd like a wide variety of feedback, a higher tip often leads to more answers to your question.

M$

What is Your Answer?

0
0
0

3 Answers

0
akshayrb's Avatar
akshayrb | 2 years, 12 months ago
3
Use RSA with SSL is also the best combination

You can leave an optional "tip" with Mahalo's virtual currency, Mahalo Dollars. If you are asking a difficult question that might require some research, or if you'd like a wide variety of feedback, a higher tip often leads to more answers to your question.

M$

Report Abuse

Post Reply Cancel
0
ferhrosa's Avatar
ferhrosa | 2 years, 12 months ago
3
This depends if you want to decrypt these passwords later.
If you don't want to do that, use MD5 that is secure and simple.

But if you want to decrypt the passwords, use a two-way encryption. In this case, I prefer the Rijndael algorithm.

You can leave an optional "tip" with Mahalo's virtual currency, Mahalo Dollars. If you are asking a difficult question that might require some research, or if you'd like a wide variety of feedback, a higher tip often leads to more answers to your question.

M$

Report Abuse

Post Reply Cancel
0
kamkam's Avatar
kamkam | 2 years, 12 months ago
3
SHA1,SHA2,MD5 are not encryption algorithms , instead they are hash algorithms.  You can use them  to check  the correctness of a password  ( some *nix  os  and  many web pages  use this method indeed ) but you can't  recover the password once hashed ( notice that many sites do not recover passwords , they simply reset them and lead users to a recreation procedure).
If this method is good for your pourpose I would suggest SHA2.
BCrypt is more a suite of encryption algorithms. And works quite well in many fields.
Talking about true encriyption , most famous ones are RSA , AES , DES and TWOFISH.

You can leave an optional "tip" with Mahalo's virtual currency, Mahalo Dollars. If you are asking a difficult question that might require some research, or if you'd like a wide variety of feedback, a higher tip often leads to more answers to your question.

M$

Report Abuse

Post Reply Cancel

Learn something new with our FREE educational apps!

Private lessons in the comfort of your own home. Get back in shape or finally pick up a guitar with our great experts guiding you the whole way!
Learn Guitar
Learn Hip Hop
Learn Pilates