3 ms·
We store passwords' one-way hash + salt only, we don't even know what our users' password are, they are never in memory to begin with. Even if someone got acces
by Fasebook 13y ago
We store passwords' one-way hash + salt only, we don't even know what our users' password are, they are never in memory to begin with. Even if someone got access to the stored value in memory somehow, they wouldn't know what to input to get that result for some time.
- kiernan 13y agoI think this is worrying more about things like database passwords and API keys used by your application.