Passwords & hash functions (Simply Explained)

How can companies store passwords safely and keep them away from hackers? Well let's find out!

With all the data breaches lately, it's likely that the password of one of your accounts has been compromised. Hackers now might know the password you've used, but they also might not.. To understand why, we'll take a look at what methods a company can use to protect user passwords. We'll take a look at encryption, hash functions and a multilayer approach!

📚 Sources
Can be found on my website:

🌍 Social

[Logical-Sense]

Keep up the good work mate, it was informative.

[siddharthgarg]

Brilliant video.. I love how you explain such complex concepts in a simple manner.. Please keep up the good work

[tar]

We were just shown this as a part of an information systems security lecture, I figured I'd actually go ahead and give it a like because it's simple and informative

[maxmenius]

They should make a hash system that resets every hour

[BobbyBundlez]

AMAZING. really appreciated you goign through drop Box's encryption method.


started coding 8-9 months ago, doing JS now and just started learning how to use the scrypt function as well as salting passwords etc... watching this video made me excited for all the deeper things you can do... maybe one day i shall make it a goal to recreate and code that level of password security like dropbox has! cool vid. thanks again


anyone wanna share their experience with coding thus far? anyone think im doin ok learning this stuff after 8 months? or am i behind.... lol... sometimes i can't tell tbh


i still love learning all this stuff regardless lol

[md.riyasathossain]

Thank you, Sir! It did helped me a lot in learning how hash functions actually work! And also Thank You for simplifying the concept!

[ForeverChip]

I just changed my password cause I saw it ryt on the screen

[Lukas-khgu]

amazing video. learnt a lot, going to share :-)

[walterlol]

Excellent video but I am not understanding something:
You use salt to generate a unique hash from a password (string).
When a user re-logins and you want to see the hash of his password you would also have to RE-ADD that same "unique salt" that was given when the user created the account. How do you know that "unique salt" if it was randomly generated?

[kgreene]

Good job. Studying for Security+ exam here and the cryptography has been one thing I've found it hard to get into. It helps to have different explanations of it.

[tomgi]

Awesome video, very friendly and pleasant to watch! about dropbox- if they're not saving the keys in their db's, where do they save them? physical devices maybe?

[RubeniAlimasi]

Learned a great deal of things thanks to this video. Thank you.

[jakub]

Cyber Security Dev: So which password protection do you want to use?

Dropbox: y e s

[chinonsoiwundu]

You mentioned something about encryption key being kept separately, how can it be queried to work on the web application? Kindly put more light

[volodymyr]

and also he pointed that he made this video))) you should ban him for that w/o the link to your channel.

[govindmenon]

Savjee next video should be about delegated proof of stake

[SilentPixel]

[Hash + salt] Question:
How can you compare passwords if the hash alters when entering the same password?

ex.
Bob and Vagene have the same passwords "sendNudes". Both will have different hash. Bob logs in. How would you compare Bob's inputted password to the one in storage?

This has been eating at me! I NEED ANSWERS!!! pls

[dev-bvzg]

I use a extremely long custom hashing method for my server that uses many variables indented to that user only

[junelljabrica]

If there are numerous layers of protection around the passwords then how can the system check whether the password you've entered is correct?

[LiEnby]

on 'TamaTown Rewrtten' ii do sha512 then xor the resulting hash with some random bytes then sha512 it again

the original game however stored them in plaintext as there reset pass thing expects to just.. get the password back