That is correct. You should not store passwords in any form ... even encrypted.
You should either store only the salted hash value, or outsource the identity management to a third party who knows not to store the users passwords. :)
You should either store only the salted hash value, or outsource the identity management to a third party who knows not to store the users passwords. :)
No comments yet.