In this chapter, we will look at the storage and management of passwords, both for our users and for accessing services like databases.
Passwords are often the weakest link in web application security. This is because they rely on humans to be secure. We have two types of attack to consider:
- 1.
Cracking a password
- 2.
Getting the password from a user
Password management is as much a responsibility of the user as it is of us as developers. We have little control over our users. However, we can limit the likelihood ...
