Tag Archives: salt

Quick tip: upgrade a legacy password storage scheme

This one’s a Spring Security quick tip that I wanted to share. Suppose that you have a password storage scheme that stores passwords as plaintext, and you want to upgrade that to storing hashes. No problem; simply replace the plaintext … Continue reading

Posted in Chapter 06 - Authentication, Quick Tips | Tagged , , , , | Leave a comment

Hashing and salting passwords with Spring Security 2

This post was originally written as a recipe for our book Spring in Practice, but we just didn’t have enough room to include it. It’s still (we think, anyway) a great recipe, so we’re making it available here free of … Continue reading

Posted in Chapter 06 - Authentication, Tutorials | Tagged , , , , , | 15 Comments

Storing passwords securely

When dealing with user account information, there are lots of different security concerns that come up. Some examples include making sure users use strong passwords, preventing automated registrations, helping end users distinguish real sites from phishing sites, transmitting user data … Continue reading

Posted in Chapter 06 - Authentication, Tutorials | Tagged , , , , , | 12 Comments