Password hashing
Password hashing is the use of a one-way, deliberately costly function to derive values for securely storing and verifying passwords without retaining the original passwords.
ASP.NET Core in Action, 3e
A password hash is a one-way derived value stored instead of the plaintext password for later password verification.
- How it is used
- Protects stored user credentials within application authentication and user-management workflows.
- How deep it goes
- Recommends hash-only storage and strong algorithms but does not explain hashing internals or algorithm selection.
- Examples
- Uses ASP.NET Core Identity storing users in a database and applying a strong hashing algorithm as the practical example.
- What you can do after
- Operate/configure ASP.NET Core Identity to store passwords as hashes instead of implementing credential handling manually.
Read how ASP.NET Core in Action, 3e explains password hashing →
Build Python Web Apps with Streamlit
Password hashing is the process of transforming passwords into one-way cryptographic representations for safer credential storage.
- How it is used
- Protects user credentials in a database-backed signup and authentication flow.
- How deep it goes
- Explains one-way hashing and demonstrates bcrypt storage and comparison, without developing cryptographic mathematics or broader security policy.
- Examples
- Uses a transformed-password illustration, a bcrypt-backed User class, a users-table row, and a Streamlit account form.
- What you can do after
- Apply bcrypt to hash passwords, persist hashes, and authenticate entered passwords against stored values.
Read how Build Python Web Apps with Streamlit explains password hashing →
Real-World Cryptography
The use of a deliberately configured password-processing function to derive values suitable for storing and verifying passwords without retaining the passwords themselves.
- How it is used
- Protects stored credentials during website registration and login by replacing passwords with verifiable digests.
- How deep it goes
- Explains the storage and verification flow, brute-force risk, and residual server compromise, but stops short of implementation detail.
- Examples
- Uses website registration and login, cleartext databases, stolen password databases, digest comparison, and Argon2.
- What you can do after
- Apply it via Argon2 by storing password hashes and comparing hashes during login instead of retaining passwords.
Read how Real-World Cryptography explains password hashing →
Rust Servers, Services, and Apps
Password hashing is the one-way transformation of a password into a value intended for secure storage and later verification.
- How it is used
- Protects stored registration credentials while supporting later password verification.
- How deep it goes
- Explains the one-way hash and salt, then applies Argon2 inside a registration handler without detailing its internals.
- Examples
- Demonstrates tutor registration, password confirmation errors, successful registration, and Rust handler code.
- What you can do after
- Apply it via rust-argon2 when implementing a Rust registration endpoint.
Read how Rust Servers, Services, and Apps explains password hashing →
Just Use Postgres!
A password hash is a one-way derived value representing a password, typically incorporating the salt needed for later verification.
- How it is used
- Stores account passwords safely and verifies login attempts without retaining raw passwords.
- How deep it goes
- Explains random salting, Blowfish hashing, embedded salts, and verification queries, but stops short of broader security administration.
- Examples
- Uses a PostgreSQL accounts table, the ahamilton account, SuperSecret123, and correct-versus-incorrect authentication queries.
- What you can do after
- Operate/configure pgcrypto to store password hashes and authenticate users with SQL.
Related concepts
- Argon2includes · Argon2 is a memory-hard password-hashing and key-derivation algorithm designed to make password-guessing attacks costly in time and memory.
- hash functionuses · A hash function deterministically maps input data to a value in a bounded output range, commonly for indexing, lookup, comparison, or integrity checking.
- cryptproduced by · crypt is a pgcrypto function that hashes a password with a salt and can reproduce a hash for password verification.
- encryptioncontrasts with · Encryption is the cryptographic transformation of readable data into ciphertext to conceal its contents, reversible through decryption with appropriate information.
- cryptographic saltused by · A cryptographic salt is an additional typically random value combined with input before hashing to distinguish identical inputs and hinder precomputed attacks.
- hash valueuses · A hash value is a deterministic, typically fixed-size value produced by applying a hash function to input data, often for lookup, comparison, identification, or integrity checking.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.