601
questions
0
votes
0
answers
24
views
User and Auth Service Password Validation [closed]
I am currently working with two separate microservices: a User Service and an Authentication (Auth) Service.
User Service: Handles all user-related operations, including storing user data and ...
0
votes
0
answers
11
views
Unique constraint on hashed password database column
This might be a stupid question and out of habit I wouldn't add a unique constraint to password hashes when stored in a database. However, I thought a bit about it and probably confused myself why ...
0
votes
0
answers
88
views
Wrong password while logging in - bcrypt
I am making a login route with jwt token and express. When I create an account, the password is hashed by bcrypt. When I log in, I need to compare them. I tried with simplest password but it didn't ...
0
votes
1
answer
76
views
Password hashing on both client and server side?
Intro
A common technique to securely hash passwords is to use salting and peppering.
Salt comes from the database and pepper comes from the server.
This means that both salting and peppering are ...
0
votes
0
answers
42
views
How to fix password replay or playback in nodejs
i'm hashing the the user password using bcrypt and stored it into DB.
during login i encrypt password in front end and decrypt it before compare using crypto-js and compared password with bcrypt....
0
votes
0
answers
27
views
Credientials error when importing .net users into Firebase
I am trying to import users from my DNN site into Firebase using the aspnet_Membership provider. To do this, I have written a script in F# (C# is fine, too) to retrieve the user details from the ...
1
vote
1
answer
65
views
Hash:check() doesn't return result expected Laravel 10
I'm traing to check a password validation without do login in a Laravel 10 project, but the function 'check' returns false, moreover, I can do login with the same password. I Don't know why return ...
0
votes
0
answers
92
views
PhpMyAdmin password_hash not matched from password_verify
I searched a lot in web and in forum but I didn't find anything similar to my problem.
I have a strange behavior of the function password_hash() used from phpMyAdmin when I manually add a new user.
If ...
1
vote
1
answer
100
views
Java's Password4J Not Returning Same Results For Same Inputs
I have a simple Hash class used to learn the ins-outs of the Password4j library.
However, I seem to be getting different results with the same inputs--I call Password.hash(...) with same clear text, ...
-1
votes
1
answer
37
views
Storing Database Password
If I save the password to the database as a hash in the configuration file of the application or in the code for security reasons, how does the application connect to the database if it does not ...
0
votes
0
answers
37
views
password_verify not working with php it seems to be the function
I use password_hash and password_verify. Everything is working well the password is welled send in the database it goes retieve it well. Both the hash password and unhash are the same, but still it ...
0
votes
0
answers
89
views
How should I hash passwords on .NET?
I've made a class that hashes a password to store in the database, and it is a singleton, since I do not want to make an instance of it every time I'm going to use, because it does not change. I've ...
0
votes
0
answers
37
views
Trouble logging in with hashed password PHP [duplicate]
Im trying to make a create user/login, but when I try to check if the input password is wrong, I get the same invalid input echo message even though the password I enter is correct. When a user gets ...
0
votes
0
answers
175
views
Moving password hashes from one algo to another
Current system uses PHP 8.2 and password_hash which I believe uses bCrypt with a (mandatory) random salt and is something we build ourselves - we are moving to a new IDS system which is .Net and uses ...
0
votes
0
answers
23
views
Login and Validation logical error in flask
My requirement is when i enter the username and passwords saved in my database, the validation should lead me to respective dashboards according to the roles but somehow when i enter id and pass saved ...
-1
votes
1
answer
67
views
Have I Hashed and Salted Correctly?
I am new to this, and I want to know if I've coded this correctly.
If so, how would I then go about storing the hashed password on a database?
import hashlib
import os
password = input("Create ...
1
vote
2
answers
60
views
ErrorC1083Cannot open include file: 'CryptHash/CryptHash.h': No such file or directory
I have downloaded https://github.com/alecgn/crypthash-net and moved it to the project's folder.This project is saved in main.cpp.
#include <CryptHash/CryptHash.h>
#include <bcrypt.h>
using ...
0
votes
0
answers
70
views
How can I modify or delete the PasswordHash class in XenForo to change the hashing algorithm?
I am using XenForo [2.2.13]. Currently, the PasswordHash class
handles password generation and verification using a custom
algorithm and what I want to do is to modify that class to change or
remove ...
0
votes
1
answer
99
views
What algorithm does VerifyHashedPassword() use?
In C#, there's a method called VerifyHashedPassword(). This does not take a hashing algorithm. In T-SQL, there's a method HashBytes(), which does require that you pass the hashing algorithm.
I am ...
-2
votes
1
answer
687
views
Generate password Hash with SHA1+salt and MD4 [closed]
Anyone know how to generate Hashes with the command line on Linux?
I have to generate a Hash with SHA1 + salt= Password:Cat Salt:XN10Zj2c
and a Hash with MD4= Password:Cat
Thank you for your help!
0
votes
1
answer
64
views
Password Validation Unable to Verify
I'm trying to create a simple login against my database to verify a user. For whatever reason Bcrypt.checkpw shows false when a true statement is expected. I am at a loss for words why this is the ...
0
votes
0
answers
118
views
how to make decryption of HashPassword BCrypt in VB.NET
how to make decryption of HashPassword BCrypt in VB.NET?.
the problem is If the user forgets the password then I can do decryption from HashPassword stored in the database or is there any other ...
0
votes
0
answers
41
views
PHP - password_hash gives me different results with same values [duplicate]
I'm making a register page for my website. I wanted to hash the password before send it to the database. Therefore, I used the password_hash() method. But this method gives different results with same ...
0
votes
0
answers
78
views
Wix password field storage
I am pretty new to WIX platform. I am currently developing a registration form where user can also enter the login password. At the moment it stores the password in a plaintext in the collection. Is ...
-1
votes
1
answer
68
views
Can we use the bitcoin idea to get rid of traditional password schemes? (usernames, hashing)
I considered the traditional password hashing:
https://security.stackexchange.com/questions/211/how-to-securely-hash-passwords/31846#31846
However, bitcoin has a way of letting people use human ...
1
vote
2
answers
82
views
PHP password_verifiy returns true while hash is incorrect
I have the following code with a userpassword contains a blow fish secret and the user password itself.
The hash is another (not the secret and the password!!) but i still got a true as result:
<?...
0
votes
0
answers
45
views
password_verify() function always returns false despite verifying repeatedly that common mistakes are mitigated [duplicate]
I am trying to use password_verify in a project and despite using this function before without any issues, it is no longer working for me. I feel like I am overlooking something really small. ...
1
vote
1
answer
262
views
openldap service not starting when using ARGON2 password scheme
The ARGON2 password scheme is working successfully, but whenever I start/restart slapd it fails to recognize ARGON2 scheme.
Output of journalctl -xeu slapd.service:
Jun 23 17:21:53 mail slapd[3932159]:...
-5
votes
1
answer
177
views
Is there a way to hash passwords directly in MySQL that is compatible with PHP?
Basically title, I've been tasked with creating a login system for a website, however they want an administrator to create the credentials given who should and shouldn't be accessing the locked parts ...
0
votes
2
answers
755
views
Ansible Vault Passwords Exposed in Plain Text During Execution
I am actually using Ansible to create user, with passwords stored in an Ansible Vault.
However, I've encountered an issue where the passwords, despite being in the Ansible Vault, are displayed in ...
-1
votes
1
answer
75
views
How to encrypt/hash passwords in database, but make available to site admin?
So one of the basic rules of website authentication is never to write unencrypted passwords to the database. I typically put in functionality to hash passwords when user accounts are created, so that ...
2
votes
1
answer
2k
views
Which hashing algorithm to use for API key?
My web application issues API keys to clients and I want to hash the API key in my database. However, it seems that if I follow best practices, whereby every hash has a different salt, then I cannot ...
1
vote
1
answer
810
views
Encoding.UTF8.GetBytes() gives different value than before converting to string
I'm trying to write password hashing code and encountered a problem with hashing methods, then created this test code to see what exactly is happening.
The method first generates a password salt and ...
0
votes
1
answer
551
views
{ "Users validation failed: password: Cast to string failed for value \"Promise { <pending> }\" (type Promise) at path \"password\"" }
I have always an error when I'm trying to create a user from postman:
{
"message": "Users validation failed: password: Cast to string failed for value "Promise { }" (type ...
2
votes
0
answers
394
views
fernet keep giving me Signature did not match digest
I'm working on a password manager app and i want to hash passwords with Fernet, the idea is that I'm writing a password into a file hashed then retrieve it when the user asks
here is my code
note : ...
0
votes
0
answers
281
views
Trying to authenticate a password using generate_password_hash and check_password_hash. from Werkzeug. It fails
I have a simple App to authenticate a user login. I wrote a test password script to ensure the authentication is working. However, it never succeeds even though it should for my testcase.
Here is the ...
0
votes
2
answers
699
views
How to use bcrypt in Codeigniter 3?
To go straight to the point I just started using Codeigniter 3 and I am building a login system but I don't know how to implement a BCRYPT hashing algorithm for the password.
Here's the
controllers &...
0
votes
0
answers
225
views
am i using the password-hash/password-verify wrong on Codeigniter4
im currently learning how to make a working multi level login using code igniter using multi table because every type of user have some uniqueness and i tried to use md5 in the past but someone tell ...
2
votes
0
answers
383
views
Need help cracking a SHA256 hash, based on a list of hint strings
I tried asking this question on security.stackexchange, but it was marked as off-topic. So I figured it probably would fit more in on here. Here goes:
I have just begun my bachelor's in IT security ...
0
votes
0
answers
25
views
PHP password_hash() and password_verify() don't match [duplicate]
I'm trying to make a user login system where the password is hashed, I'm using this:
function mk_password_hash($password) {
$options = [
'cost' => 12,
];
$...
1
vote
0
answers
201
views
Object of class Symfony\Component\PasswordHasher\Hasher\UserPasswordHasher could not be converted to string
I want generate faker users with symfony with Datafixtures and I hash users password with "UserPasswordHasher" but when I run the command " php bin/console doctrine:fixtures:load" ...
0
votes
0
answers
76
views
How can I use a hashed password without password_verify in the array?
For a customer (doctor) I have created a contact form. In the mailer.php configuration the email password is entered in plain text in an array. Of course, a doctor is not allowed to give me his ...
1
vote
0
answers
30
views
Hashing passwords to protect against brute force attacks [duplicate]
I am trying to add a small proof of work function to protect a password from brute force attacks. The solution I have so far is based on the security iPhones have on their lock screen passcodes. I'm ...
1
vote
0
answers
190
views
Argon2 hash to use for disabled accounts
For the Python argon2 library, I would like a simple hash value that is not the hash of any actual password, and yet will raise argon2.exceptions.VerifyMismatchError rather than another exception when ...
0
votes
2
answers
920
views
Django Password not encrypted, custom user model using (AbstractUser)
In Django I have replaced the user model using (AbstractUser).
Then in the admin panel area the fields are unordered. When generating a new user, the password is not encrypted, the user is saved with ...
1
vote
1
answer
570
views
Hashing function security level required for storing passwords
I am working on a project that has to store users passwords. With that password you can gain access to a user achievements and stuff so it's really important that you can not get the password even if ...
0
votes
1
answer
470
views
How to add an administrator with bcrypt password encryption in phpmyadmin or edit existing admin user bcrypt encrypted password?
I have encountered a problem in my sql script. I bought an sql script online and I'm trying to work around the script but I can't add another admin to the database and I can't edit the admin password ...
1
vote
1
answer
229
views
Speed up iterating through a file
I'm running the picoCTF PW Crack 5 gym challenge, but it is slow to iterate through the password list they provide for the challenge. Below is the code I'm using in the script to solve the challenge ...
0
votes
4
answers
786
views
pbkdf2 - How do I verify hashed user password (C#)?
When a User registers, I run the password they input through CreateHash() - see below.
I then get passed back a Dictionary<string, string> with the Hash and the Salt in it which I then store in ...
0
votes
1
answer
743
views
Laravel Hash::make and Hash::check
It goes like this:
$pword = Hash::make('pass');
$input_pass = $request->('password');
dd(Hash::check($input_pass, $pword));
//Assume the input password is 'pass'
The result is True.
but when I did ...