For this week, here is a short post about reinventing the wheel. An interesting conversation happened on Twitter where Dave Dustin asked: “Does anybody have… Read More »If I can’t use PWDENCRYPT, how am I supposed to use HASHBYTES?
Background Fellow Microsoft MVP Troy Hunt (blog | Twitter) has been operating the website Have I Been Pwned (HIBP) for a number of years now. For… Read More »What is a strong password anyway?
Recently I wrote: Don’t store passwords in a database. I stand by this statement. I expected a lot of flak because I didn’t explain myself.… Read More »How to really store a password in a database