Answer by Anupriyam Raj for Python's safest method to store and retrieve...
For flask application or any python application you can use the werkzeug WSGI web application library, which provides you the option to generate and decode the password with salt and different types of...
View ArticleAnswer by Terrel Shumway for Python's safest method to store and retrieve...
I answered this here: https://stackoverflow.com/a/18488878/1661689, and so did @Koffie.I don't know how to emphasize enough that the accepted answer is NOT secure. It is better than plain text, and...
View ArticleAnswer by llazzaro for Python's safest method to store and retrieve passwords...
Here is a simpler way (taken from effbot), provided passwords with a length greater than 8 will not be a problem*:import cryptimport random, stringdef getsalt(chars = string.letters + string.digits): #...
View ArticleAnswer by Maarten Derickx for Python's safest method to store and retrieve...
I think it is best to use a function dedicated to hashing passwords for this. I explain some reasons for this here: https://stackoverflow.com/a/10948614/893857Nowadays the standard library has a...
View ArticleAnswer by Paul Crowley for Python's safest method to store and retrieve...
If you have enough control over both endpoints of the application, the absolute best way is using PAK-Z+.(Edited: the original version recommended SRP but PAK-Z+ has a proof of security.)
View ArticleAnswer by rz. for Python's safest method to store and retrieve passwords from...
Store the password+salt as a hash and the salt. Take a look at how Django does it: basic docs and source.In the db they store <type of hash>$<salt>$<hash> in a single char field. You...
View ArticlePython's safest method to store and retrieve passwords from a database
Looking to store usernames and passwords in a database, and am wondering what the safest way to do so is. I know I have to use a salt somewhere, but am not sure how to generate it securely or how to...
View Article
