Practical JSF in Java EE 8: Web Applications ​in Java for the Enterprise

© Michael Müller 2018

Michael MüllerPractical JSF in Java EE 8 https://doi.org/10.1007/978-1-4842-3030-5_28

28. Secure Passwords

Michael Müller¹ 

(1)

Brühl, Nordrhein-Westfalen, Germany

 

Access to special areas of Alumni will be restricted to members only. That means we need to restrict access to authorized persons only. During the registration process , we ask the user to enter a password that we store together with the account entity.

Because Alumni is exposed to the web, there’s a potential risk that somebody might tamper with the system. Passwords need special protection —they should never be stored in plain text format. Although there is no such things as 100% protection against crackers (malicious hackers—there are nice hackers), it’s possible ...