Tech Blog

Password Hashing using Rfc2898DeriveBytes

By: Chris Dunn on Tue Jun 25, 2019 (6 min read)

With the recent data security breaches, we as developers need to make sure we are doing our best to secure the application data the best we can.  One very obvious problem is passwords and other sensitive data stored in plain-text in a user's database record on the server. For data that you must maintain intact, like perhaps a social security number or similar identifier, you need to encrypt the data completely.  It's always a good idea to take a long hard look at what data you must maintain.  Th ...