Encrypting a password in C #?
First, you are not really going to store the encrypted password anywhere, instead of doing a one-way hash (like SHA ), store that hash. Then when you challenge the user for their password, you perform the same hash. If the new hash matches the stored hash, you get a match.
The difference between hash and encryption is that with encryption you can recover the original text, where with a hash you cannot.
Reading on SHA (secure hashing algorithm) and other hashing algorithms. This should get you off to a good start.
Better yet, learn about the .NET built-in membership API . It's almost trivial to implement, and it manages all of this annoyance in terms of user passwords, logins, logouts and much more for you.
source to share
UPDATED
Have a look at this answer: C # Password Encryption
- or -
Read this post: http://csharptest.net/470/another-example-of-how-to-store-a-salted-password-hash/
There is a lot of good and bad information on the internet about password storage. You need to know two things:
- You must use a salted hash to prevent dictionary attacks
- You are using the minimal SHA256 hash provider
A quick search gave me this example code: http://www.obviex.com/samples/hash.aspx
and I'll go with this SaltedHash utility class (looks pretty complete at first glance):
http://www.dijksterhuis.org/creating-salted-hash-values-in-c/
source to share