Am I supposed to store hashes for passwords?
- by Doug
User System and Passwords: I was looking through MD5 stuff, and I am wondering what is the normal/good practice for passwords. Right now, I think people super encrypt the passwords and store the hashes. If so, how does password checking work? I just have the input password go through the encryption process again and then check the hash with the stored one, correct?
This question may contradict the above, but should my salt ever be a randomly generated value?