Is it safe to check password against the HIBP Pwned Passwords API during account registration? – security.stackexchange.com

Is it safe to check password against the HIBP Pwned Passwords API during account registration? – security.stackexchange.com

10:03 No Comments
User registers account on a web app. Passwords are salted and hashed. But is it safe to check the password against the HIBP Pwned Passwords API, before salting and hashing it? Of course the app uses ...

from Hot Questions - Stack Exchange OnStackOverflow
via Blogspot

Share this

Unknown

Artikel Terkait

0 Comment to "Is it safe to check password against the HIBP Pwned Passwords API during account registration? – security.stackexchange.com"

Post a Comment

Subscribe to: Post Comments (Atom)