python-custom.tar.gz

Python

There are a lot of common mistakes in password security. From storing plaintext passwords to not salting user passwords, to using insufficient hashing algorithms like SHA-1.

In this course, you will learn why plaintext passwords, encryption, and plain hashes are security measures that should not be used. In each lesson, you will learn why these password storage techniques increase your risk for a cyber attack. Beyond that, you’ll also learn how to fix them to create a more secure login experience.

By the end of this course, you will have a strong understanding of password security, and you will be better equipped to create web apps that users trust.

Password Security: How not to Store Passwords

## Two-way encrypted passwords

So, you've decided not to store your passwords in plain text? You are on the right path. But what should you do instead? Perhaps just encrypt it. That ought to be good.

The example below uses [PyNaCl's](https://pypi.org/project/PyNaCl/) two-way encryption algorithms to encrypt and decrypt a password. Otherwise, it's just like the plaintext example from the last lesson.

# Two-way encrypted passwords

So, you've decided not to store your passwords in plain text? You are on the right path. But what should you do instead? Perhaps just encrypt it. That ought to be good.

The example below uses [PyNaCl's](https://pypi.org/project/PyNaCl/) two-way encryption algorithms to encrypt and decrypt a password. Otherwise, it's just like the plaintext example from the last lesson.

Look at a common innovation in password storage and discuss its shortcomings.

__default

Storing Encrypted Passwords

Two-way encrypted passwords