Tagged Questions
1
vote
5answers
84 views
How do webmasters store and keep track of their passwords [closed]
I'm developing a site for the first time, and I'm trying to work out the best way to store and track all the accounts/passwords e.g. Server passwords, ftp passwords, API passwords (FB, Google, ...
6
votes
4answers
180 views
Webhosting company able to unhash passwords?
Tonight I was using the cPanel of a web-site I host and when I went to change the password I received a warning that I couldn't change the password to my desired password because it was too similar to ...
3
votes
3answers
156 views
Why do websites require retyping the password upon user error in a registration form?
Many times, when you fill out a registration form and miss a required field, the form reloads with all the fields filled out except for the password which you have to retype.
I'm wondering if I ...
2
votes
1answer
62 views
Password protected website
I need to add a user authentication page before the actual homepage of the website.
In Joomla! I just set the website offline and the offline page loads in place of the homepage but then it's ...
0
votes
0answers
107 views
SIMPLEST way to set up password protection for a static site, with basic admin UI?
I have a static site.
I would like the simplest approach to password protecting a directory, with a basic admin UI for adding/removing users. I will have so few users that I don't care about ...
1
vote
2answers
168 views
Proper password handling for login
I have read a lot about PHP login security recently, but many questions on Stack Overflow regarding security are outdated.
I understand bcrypt is one of the best ways of hashing passwords today. ...
1
vote
1answer
257 views
Is the php method md5() secure? Can it be used for passwords? [closed]
So executing a php script causes the form values to be sent to the server, and then they are processed.
If you want to store a password in your db than you want it to be a cryptographic hash(so ...
3
votes
2answers
111 views
What are recommended password reset mecanisms?
All,
I'm developing a small, non-commercial web app. I'm trying to decide how to help a user who might have lost their password. I need a mechanism that is, in order of priority:
1) User friendly;
...
0
votes
1answer
146 views
Controlling Access using htpasswd and htaccess
I've got a bit of a peculiar problem on my site. I'm using a .htaccess and .htpasswd file to protect the root of the site. This works great, but when I try to view a video file on my site, it prompts ...
6
votes
3answers
331 views
Using two salts for user authentication?
When storing user credentials in a database, we all know that hashing the password is the bare minimum you should do, but salting it before hashing is better. The salt should be randomly generated, ...
