Password Hashing, Salts, Peppers | Explained!

----------------------------------------------------------------------------------------------

[barborabrchelova]

not all heroes wear capes, some of them make good tutorials

[ayodejiakinborewa]

I like when people can explain such complex things easily

[amandacapsicum]

Thanks for the explanation of peppers! I didn't know that existed.

However... Every time you teach people about MD5 without explicitly warning them it's been cracked, a cryptography fairy dies.

[hektikethnik]

There are 2 concepts of a pepper
1. What was explained here, a small random input that is iterated through when authenticating the user
2. An input like the salt but the same for every password that is stored separately to the password (sometimes, but not wisely in the code itself)

[brianhackit]

Jeez.
I wish you taught my Comp-Sci class...
Now I get it.

Tx

[dxdiagg]

Bruteforce using quantum computer would crack this for 10s

[PulseZ]

Fantastic tutorial, thank you. I am studying for my CISSP exam and this made a lot of sense to me.

[juliavanderkris]

Great video. I knew about hashing and salting, but not about peppers. What do you think is better/safer? Or isn't there a "best way"?

[yyyooohhhooo]

Dude are you f**king crazy?!?!?
You just spent 4 mins clearly explaining what I have been confused about for 4 days!!!
Thank you!

[Liebe-Futurel]

Thanks for the video! I was trying to figure out how salts were stored and you explained it perfectly

[antonlinden]

Nice video! Great concept!

If anyone is thinking of implementing this into PHP as I first did, don't. It's already implemented in PHP with the function of password_hash & password_verify. Wish I knew that before I implemented it! haha

[BagOSalad]

Thanks so much for these videos! it makes learning so much easier!

[ChaceBonanno]

Are peppers used for scrypt? Whereas SHA256 lacks the pappers.

[EyalDelarea]

Took you less than5 minutes to explain this topic.
My teacher had an hour and a half and I still didn't get it.
Thank you

[leafofyume]

why only 1 pepper letter? deos using like 4 letters not produce a ton more possible hashes?

[alexandrosspyropoulos]

Quick and simple explained. Nice video!

[marcelfilms]

Hmm very interesting. I'll absolutely never need to know this so i will never forget

[kevinjones]

Very well done ty I was confused till this point!!!

[yazidyusof]

Doot doot. Did I get healthy bones? Great use of memes man, very dank

[dumeinstichbineinniemandni]

Awesome, clicked away, forgot to like so I went back and left a like :)