python-custom.tar.gz

Python

There are a lot of common mistakes in password security. From storing plaintext passwords to not salting user passwords, to using insufficient hashing algorithms like SHA-1.

In this course, you will learn why plaintext passwords, encryption, and plain hashes are security measures that should not be used. In each lesson, you will learn why these password storage techniques increase your risk for a cyber attack. Beyond that, you’ll also learn how to fix them to create a more secure login experience.

By the end of this course, you will have a strong understanding of password security, and you will be better equipped to create web apps that users trust.

Password Security: How not to Store Passwords

## Password hashing algorithms

Salted hashes have several nice properties. The only problem is the speed an attacker can test guesses. They would be much more secure if they took more time. Here's our dumb hash algorithm again, but now it repeats some number of times:

# Password hashing algorithms

Salted hashes have several nice properties. The only problem is the speed an attacker can test guesses. They would be much more secure if they took more time. Here's our dumb hash algorithm again, but now it repeats some number of times:

Get introduced to a couple of special-purpose password hashing algorithms: PBKDF2 and bcrypt.

__default

Strong-ish Password Hashing

Password hashing algorithms