599 questions
0 votes
1 answer
92 views
How to store PasswordHash and PasswordSalt correctly in DB
Below is HashingHelper.CreatePasswordHash() function I use to create passwordHash and passwordSalt during the Register action. I write this data into DB and when user wants to login I read from DB and ...
0 votes
0 answers
47 views
How do I connect my python api to enable login to my wordpress website
I am creating an api that would allow users of my wordpress website to also login from a mobile device (I am making use of fast-api). but I cannot figure out how to hash the password from python so ...
1 vote
2 answers
352 views
Neither WebCryptoAPI nor a crypto module is available in bcryptjs v3.0.0
I recently upgraded bcryptjs to version ^3.0.0 in my Node.js project and encountered the following error while trying to hash a password: const bcrypt = require("bcryptjs"); const password =...
-1 votes
1 answer
101 views
Password_verify from PHP always return false [duplicate]
I'm working on a login page and the password_verify() always returns false when getting the hash from the DB but prints true when using static values Here's my code : <?php require_once "ID....
0 votes
0 answers
29 views
Python Postgres pull as byte object vs str
I'm doing a basic Python Flask application with a Postgres database using psycopg2. I'm having trouble setting up the user registration password hash as it appears I'm working with a string vs byte ...
0 votes
1 answer
148 views
Can I remove the prefix of the password hash in Argon2 when storing in database?
I am using this Argon2 library in Rust for password hashing: https://docs.rs/argon2/latest/argon2/ let salt = SaltString::generate(&mut OsRng); let argon2 = Argon2::default(); let password_bytes = ...
0 votes
0 answers
47 views
password_hash() cannot recognize my password correctly [duplicate]
I know I registered " 1 " as the password but as I check the password stored in the DB using password_verify(), it can't be recognized correctly. Can someone point out what I did wrong? If I ...
0 votes
0 answers
28 views
How to rectify this authentication problem [duplicate]
I am creating a login page for my new project. When logging in, the password can't match. It says Invalid password. This is my code. <!DOCTYPE html> <html lang="en"> <head&...
1 vote
0 answers
48 views
Unique constraint on hashed password database column
This might be a stupid question and out of habit I wouldn't add a unique constraint to password hashes when stored in a database. However, I thought a bit about it and probably confused myself why ...
0 votes
0 answers
119 views
Wrong password while logging in - bcrypt
I am making a login route with jwt token and express. When I create an account, the password is hashed by bcrypt. When I log in, I need to compare them. I tried with simplest password but it didn't ...
0 votes
1 answer
300 views
Password hashing on both client and server side?
Intro A common technique to securely hash passwords is to use salting and peppering. Salt comes from the database and pepper comes from the server. This means that both salting and peppering are ...
1 vote
0 answers
98 views
Hash:check() doesn't return result expected Laravel 10
I'm traing to check a password validation without do login in a Laravel 10 project, but the function 'check' returns false, moreover, I can do login with the same password. I Don't know why return ...
1 vote
1 answer
220 views
Java's Password4J Not Returning Same Results For Same Inputs
I have a simple Hash class used to learn the ins-outs of the Password4j library. However, I seem to be getting different results with the same inputs--I call Password.hash(...) with same clear text, ...
-1 votes
1 answer
66 views
Storing Database Password
If I save the password to the database as a hash in the configuration file of the application or in the code for security reasons, how does the application connect to the database if it does not ...
0 votes
0 answers
44 views
password_verify not working with php it seems to be the function
I use password_hash and password_verify. Everything is working well the password is welled send in the database it goes retieve it well. Both the hash password and unhash are the same, but still it ...