how to login with encrypted pasword?

Question

Dear all, in registartion time iam saving the password in encrypted fotmat, but after registaration trying to login with password it was not accepting my credentials but it was accepting encrypted data so can u give example how to login with encrypted password

Gaurav Kumar Arora · Answer

Prasad - I am bit late here, but I would like to add my words. Whenever you getting your users registered/enrolled to your website, you must provide some encryption Logic, might be you used some algorithm like MD5, SHA, RSA or any other one. You need to I suggest you to read Cryptography here is the CsharpCorner link: http://www.c-sharpcorner.com/1/60/cryptography-C-Sharp.aspx I am not providing any code here, as I understood your problem is generic so, you just need to understand the terms/concepts. Have a great coding!

Wim Sturkenboom · Answer

Where does the encryption take place? Are you encrypting at the sql level? If so, you need to compare the stored encrypted password with the encrypted version of the submitted password. This is my stored procedure to add a user; sql server encrypts the password. ALTER PROCEDURE [dbo].[usp_Users_Add] @pUserName nvarchar(128), -- user name @pEmailAddress nvarchar(256), -- email address @pPhonenumber nvarchar(50) = null, -- phone number @pDefaultGroupID bigint, -- default group ID @pPassword nvarchar(256), -- password @pPasswordChangeRequired bit, -- indicates if user has to change password @pCanLogin bit -- indicates of user can login AS BEGIN insert into Users (UserName, EmailAddress, PhoneNumber, DefaultGroupID, [Password], fPasswordChangeRequired, fCanLogin) Values (@pUserName, @pEmailAddress, @pPhonenumber, @pDefaultGroupID, HASHBYTES('sha2_256',@pPassword) , @pPasswordChangeRequired, @pCanLogin) END And to check user's credentials; sql server compares the stored password against the hash of the submitted password ALTER PROCEDURE [dbo].[usp_Users_GetByCredentials] @pEmailAddress nvarchar(256), @pPassword nvarchar(256) AS BEGIN -- SET NOCOUNT ON added to prevent extra result sets from -- interfering with SELECT statements. SET NOCOUNT ON; SELECT * from Users left join UserPermissions on FK_userID = PK_userID where EmailAddress = @pEmailAddress and [Password] = HASHBYTES('sha2_256', @pPassword) and fCanLogin = 'true' END

Guest User · Answer

http://www.aspdotnet-suresh.com/2010/12/introduction-here-i-will-explain-how-to_28.html http://www.c-sharpcorner.com/Blogs/9384/ Please click checkbox "This is correct answer" if you find it helpful!

how to login with encrypted pasword?

Answers (3)