Adding Salt to Hashing: A Better Way to Store Passwords

Adding salt to hashes refers to adding random data to the input of a hash function to guarantee a unique output, even when the inputs are the same. In this video Developer Advocate Will Johnson walks you through the benefits of adding Salt to your Hashes and breaks down how the process works.

Corresponding Blog Post:

Chapter Markers:
00:00 Introduction
03:08 The Vulnerabilities of Unsalted Hashes
07:24 Mitigating Password Attacks with Salt
12:17 Generating a Good Salt
17:06 Recap and Conclusions

#hashing #login #developer #authentication
-----------------------------------------------------------------------------------------------

[cryptoninjapay]

Love how you broke this down into easy to understand terms. Great explanation!

[SmallvilleJW]

This was an awesome explanation. Thank you for making things easy to understand! Great job 😎

[kacy]

Best explanation ever. Only thing I would add is that you can append the salt to the hash, then store that in the db. That way you don't need a separate salt column in the db.

[rjk]

excellent video! every programmer should be required to watch this video!

[ash_tray_]

Man, this video is awesome hahaha your shadowboxing had me laughing out loud. Also holy crap your production quality and visuals are top tier. I can't imagine how long this took. Definitely the most clear and easy to understand video I've seen on hashing, you explained all the concepts in a human way, and not like a robot way lol. Instant sub! Great job

[theisegeberg]

Nice to get some things that I was "sort of sure that's how it is" hammered in. Great video, and great pacing.

[panteliskaramolegkos]

...and this is how educational content should be made

[rubblvb]

good work, just wanted to watch part of the video and watched until the end

[stringpicker]

Informative and actually quite entertaining to watch!

[NikhilChandel-xysw]

can Auth0 provide user level resource access control overriding existing roles/permission hierarchies..just because we don't want to create too many roles&permissions

[JasDosanjh-mjco]

you said the salt is stored in plaintext?

[mihirsawant]

Spring Security in Java Ecosystem right, its not for js I think

[ricardotrejoruiz]

I don't understand how a salted password with random salt can match the saved hash on database.