Skip to main content
Filter by
Sorted by
Tagged with
0 votes
0 answers
24 views

User and Auth Service Password Validation [closed]

I am currently working with two separate microservices: a User Service and an Authentication (Auth) Service. User Service: Handles all user-related operations, including storing user data and ...
OSY's user avatar
  • 3
0 votes
0 answers
11 views

Unique constraint on hashed password database column

This might be a stupid question and out of habit I wouldn't add a unique constraint to password hashes when stored in a database. However, I thought a bit about it and probably confused myself why ...
Skru's user avatar
  • 41
0 votes
0 answers
88 views

Wrong password while logging in - bcrypt

I am making a login route with jwt token and express. When I create an account, the password is hashed by bcrypt. When I log in, I need to compare them. I tried with simplest password but it didn't ...
Vishesh Gupta's user avatar
0 votes
1 answer
76 views

Password hashing on both client and server side?

Intro A common technique to securely hash passwords is to use salting and peppering. Salt comes from the database and pepper comes from the server. This means that both salting and peppering are ...
Ebbe Wertz's user avatar
0 votes
0 answers
42 views

How to fix password replay or playback in nodejs

i'm hashing the the user password using bcrypt and stored it into DB. during login i encrypt password in front end and decrypt it before compare using crypto-js and compared password with bcrypt....
rajat joshi's user avatar
0 votes
0 answers
27 views

Credientials error when importing .net users into Firebase

I am trying to import users from my DNN site into Firebase using the aspnet_Membership provider. To do this, I have written a script in F# (C# is fine, too) to retrieve the user details from the ...
Steven McFadyen's user avatar
1 vote
1 answer
65 views

Hash:check() doesn't return result expected Laravel 10

I'm traing to check a password validation without do login in a Laravel 10 project, but the function 'check' returns false, moreover, I can do login with the same password. I Don't know why return ...
Michu's user avatar
  • 150
0 votes
0 answers
92 views

PhpMyAdmin password_hash not matched from password_verify

I searched a lot in web and in forum but I didn't find anything similar to my problem. I have a strange behavior of the function password_hash() used from phpMyAdmin when I manually add a new user. If ...
Andrea_86's user avatar
  • 527
1 vote
1 answer
100 views

Java's Password4J Not Returning Same Results For Same Inputs

I have a simple Hash class used to learn the ins-outs of the Password4j library. However, I seem to be getting different results with the same inputs--I call Password.hash(...) with same clear text, ...
Dave Lowe's user avatar
-1 votes
1 answer
37 views

Storing Database Password

If I save the password to the database as a hash in the configuration file of the application or in the code for security reasons, how does the application connect to the database if it does not ...
Leo's user avatar
  • 1
0 votes
0 answers
37 views

password_verify not working with php it seems to be the function

I use password_hash and password_verify. Everything is working well the password is welled send in the database it goes retieve it well. Both the hash password and unhash are the same, but still it ...
Farid Alma's user avatar
0 votes
0 answers
89 views

How should I hash passwords on .NET?

I've made a class that hashes a password to store in the database, and it is a singleton, since I do not want to make an instance of it every time I'm going to use, because it does not change. I've ...
Carlos Saraiva's user avatar
0 votes
0 answers
37 views

Trouble logging in with hashed password PHP [duplicate]

Im trying to make a create user/login, but when I try to check if the input password is wrong, I get the same invalid input echo message even though the password I enter is correct. When a user gets ...
chrida's user avatar
  • 1
0 votes
0 answers
175 views

Moving password hashes from one algo to another

Current system uses PHP 8.2 and password_hash which I believe uses bCrypt with a (mandatory) random salt and is something we build ourselves - we are moving to a new IDS system which is .Net and uses ...
bhttoan's user avatar
  • 2,736
0 votes
0 answers
23 views

Login and Validation logical error in flask

My requirement is when i enter the username and passwords saved in my database, the validation should lead me to respective dashboards according to the roles but somehow when i enter id and pass saved ...
Ayumi Sashihara's user avatar
-1 votes
1 answer
67 views

Have I Hashed and Salted Correctly?

I am new to this, and I want to know if I've coded this correctly. If so, how would I then go about storing the hashed password on a database? import hashlib import os password = input("Create ...
NukaWinter's user avatar
1 vote
2 answers
60 views

ErrorC1083Cannot open include file: 'CryptHash/CryptHash.h': No such file or directory

I have downloaded https://github.com/alecgn/crypthash-net and moved it to the project's folder.This project is saved in main.cpp. #include <CryptHash/CryptHash.h> #include <bcrypt.h> using ...
Avantika eng's user avatar
0 votes
0 answers
70 views

How can I modify or delete the PasswordHash class in XenForo to change the hashing algorithm?

I am using XenForo [2.2.13]. Currently, the PasswordHash class handles password generation and verification using a custom algorithm and what I want to do is to modify that class to change or remove ...
Juan Agudelo's user avatar
0 votes
1 answer
99 views

What algorithm does VerifyHashedPassword() use?

In C#, there's a method called VerifyHashedPassword(). This does not take a hashing algorithm. In T-SQL, there's a method HashBytes(), which does require that you pass the hashing algorithm. I am ...
tharpa's user avatar
  • 39
-2 votes
1 answer
687 views

Generate password Hash with SHA1+salt and MD4 [closed]

Anyone know how to generate Hashes with the command line on Linux? I have to generate a Hash with SHA1 + salt= Password:Cat Salt:XN10Zj2c and a Hash with MD4= Password:Cat Thank you for your help!
Kiwi's user avatar
  • 1
0 votes
1 answer
64 views

Password Validation Unable to Verify

I'm trying to create a simple login against my database to verify a user. For whatever reason Bcrypt.checkpw shows false when a true statement is expected. I am at a loss for words why this is the ...
radriaansNES's user avatar
0 votes
0 answers
118 views

how to make decryption of HashPassword BCrypt in VB.NET

how to make decryption of HashPassword BCrypt in VB.NET?. the problem is If the user forgets the password then I can do decryption from HashPassword stored in the database or is there any other ...
user avatar
0 votes
0 answers
41 views

PHP - password_hash gives me different results with same values [duplicate]

I'm making a register page for my website. I wanted to hash the password before send it to the database. Therefore, I used the password_hash() method. But this method gives different results with same ...
leoboran123's user avatar
0 votes
0 answers
78 views

Wix password field storage

I am pretty new to WIX platform. I am currently developing a registration form where user can also enter the login password. At the moment it stores the password in a plaintext in the collection. Is ...
stafan's user avatar
  • 145
-1 votes
1 answer
68 views

Can we use the bitcoin idea to get rid of traditional password schemes? (usernames, hashing)

I considered the traditional password hashing: https://security.stackexchange.com/questions/211/how-to-securely-hash-passwords/31846#31846 However, bitcoin has a way of letting people use human ...
prime's user avatar
  • 25
1 vote
2 answers
82 views

PHP password_verifiy returns true while hash is incorrect

I have the following code with a userpassword contains a blow fish secret and the user password itself. The hash is another (not the secret and the password!!) but i still got a true as result: <?...
marcfunk's user avatar
0 votes
0 answers
45 views

password_verify() function always returns false despite verifying repeatedly that common mistakes are mitigated [duplicate]

I am trying to use password_verify in a project and despite using this function before without any issues, it is no longer working for me. I feel like I am overlooking something really small. ...
Brandon Lisonbee's user avatar
1 vote
1 answer
262 views

openldap service not starting when using ARGON2 password scheme

The ARGON2 password scheme is working successfully, but whenever I start/restart slapd it fails to recognize ARGON2 scheme. Output of journalctl -xeu slapd.service: Jun 23 17:21:53 mail slapd[3932159]:...
guhidfelleira's user avatar
-5 votes
1 answer
177 views

Is there a way to hash passwords directly in MySQL that is compatible with PHP?

Basically title, I've been tasked with creating a login system for a website, however they want an administrator to create the credentials given who should and shouldn't be accessing the locked parts ...
Darik Washeare's user avatar
0 votes
2 answers
755 views

Ansible Vault Passwords Exposed in Plain Text During Execution

I am actually using Ansible to create user, with passwords stored in an Ansible Vault. However, I've encountered an issue where the passwords, despite being in the Ansible Vault, are displayed in ...
Mrbibi38's user avatar
-1 votes
1 answer
75 views

How to encrypt/hash passwords in database, but make available to site admin?

So one of the basic rules of website authentication is never to write unencrypted passwords to the database. I typically put in functionality to hash passwords when user accounts are created, so that ...
Cmaso's user avatar
  • 1,093
2 votes
1 answer
2k views

Which hashing algorithm to use for API key?

My web application issues API keys to clients and I want to hash the API key in my database. However, it seems that if I follow best practices, whereby every hash has a different salt, then I cannot ...
poundifdef's user avatar
  • 19.2k
1 vote
1 answer
810 views

Encoding.UTF8.GetBytes() gives different value than before converting to string

I'm trying to write password hashing code and encountered a problem with hashing methods, then created this test code to see what exactly is happening. The method first generates a password salt and ...
Val's user avatar
  • 1,719
0 votes
1 answer
551 views

{ "Users validation failed: password: Cast to string failed for value \"Promise { <pending> }\" (type Promise) at path \"password\"" }

I have always an error when I'm trying to create a user from postman: { "message": "Users validation failed: password: Cast to string failed for value "Promise { }" (type ...
Berk Disli's user avatar
2 votes
0 answers
394 views

fernet keep giving me Signature did not match digest

I'm working on a password manager app and i want to hash passwords with Fernet, the idea is that I'm writing a password into a file hashed then retrieve it when the user asks here is my code note : ...
ali nasser's user avatar
0 votes
0 answers
281 views

Trying to authenticate a password using generate_password_hash and check_password_hash. from Werkzeug. It fails

I have a simple App to authenticate a user login. I wrote a test password script to ensure the authentication is working. However, it never succeeds even though it should for my testcase. Here is the ...
Umberto Vizcaino's user avatar
0 votes
2 answers
699 views

How to use bcrypt in Codeigniter 3?

To go straight to the point I just started using Codeigniter 3 and I am building a login system but I don't know how to implement a BCRYPT hashing algorithm for the password. Here's the controllers &...
nrmnfckngrckwlll's user avatar
0 votes
0 answers
225 views

am i using the password-hash/password-verify wrong on Codeigniter4

im currently learning how to make a working multi level login using code igniter using multi table because every type of user have some uniqueness and i tried to use md5 in the past but someone tell ...
Tatsuya's user avatar
  • 11
2 votes
0 answers
383 views

Need help cracking a SHA256 hash, based on a list of hint strings

I tried asking this question on security.stackexchange, but it was marked as off-topic. So I figured it probably would fit more in on here. Here goes: I have just begun my bachelor's in IT security ...
Skoven's user avatar
  • 21
0 votes
0 answers
25 views

PHP password_hash() and password_verify() don't match [duplicate]

I'm trying to make a user login system where the password is hashed, I'm using this: function mk_password_hash($password) { $options = [ 'cost' => 12, ]; $...
medk's user avatar
  • 9,499
1 vote
0 answers
201 views

Object of class Symfony\Component\PasswordHasher\Hasher\UserPasswordHasher could not be converted to string

I want generate faker users with symfony with Datafixtures and I hash users password with "UserPasswordHasher" but when I run the command " php bin/console doctrine:fixtures:load" ...
Halit Cinici's user avatar
0 votes
0 answers
76 views

How can I use a hashed password without password_verify in the array?

For a customer (doctor) I have created a contact form. In the mailer.php configuration the email password is entered in plain text in an array. Of course, a doctor is not allowed to give me his ...
Hot Dog's user avatar
  • 35
1 vote
0 answers
30 views

Hashing passwords to protect against brute force attacks [duplicate]

I am trying to add a small proof of work function to protect a password from brute force attacks. The solution I have so far is based on the security iPhones have on their lock screen passcodes. I'm ...
Anters Bear's user avatar
  • 1,926
1 vote
0 answers
190 views

Argon2 hash to use for disabled accounts

For the Python argon2 library, I would like a simple hash value that is not the hash of any actual password, and yet will raise argon2.exceptions.VerifyMismatchError rather than another exception when ...
bitinerant's user avatar
  • 1,481
0 votes
2 answers
920 views

Django Password not encrypted, custom user model using (AbstractUser)

In Django I have replaced the user model using (AbstractUser). Then in the admin panel area the fields are unordered. When generating a new user, the password is not encrypted, the user is saved with ...
Basilio Cristov's user avatar
1 vote
1 answer
570 views

Hashing function security level required for storing passwords

I am working on a project that has to store users passwords. With that password you can gain access to a user achievements and stuff so it's really important that you can not get the password even if ...
roee's user avatar
  • 107
0 votes
1 answer
470 views

How to add an administrator with bcrypt password encryption in phpmyadmin or edit existing admin user bcrypt encrypted password?

I have encountered a problem in my sql script. I bought an sql script online and I'm trying to work around the script but I can't add another admin to the database and I can't edit the admin password ...
Maxwell Manu's user avatar
1 vote
1 answer
229 views

Speed up iterating through a file

I'm running the picoCTF PW Crack 5 gym challenge, but it is slow to iterate through the password list they provide for the challenge. Below is the code I'm using in the script to solve the challenge ...
Ryukashin's user avatar
0 votes
4 answers
786 views

pbkdf2 - How do I verify hashed user password (C#)?

When a User registers, I run the password they input through CreateHash() - see below. I then get passed back a Dictionary<string, string> with the Hash and the Salt in it which I then store in ...
joehelsing's user avatar
0 votes
1 answer
743 views

Laravel Hash::make and Hash::check

It goes like this: $pword = Hash::make('pass'); $input_pass = $request->('password'); dd(Hash::check($input_pass, $pword)); //Assume the input password is 'pass' The result is True. but when I did ...
Jack JRZ's user avatar

1
2 3 4 5
13