A website I'm developing will need a table of all usernames and passwords. To logon, I check the values they entered in the form against the values in the database. I am storing these values in a MS SQL 2005 database.
It works now with the passwords as plain text, but I feel like I should probably encrypt them so that looking at the database won't display all their passwords.
What is typically considered the best practice these days for doing this sort of thing? I've found a number of ways mentioned online how to do it, but what do people generally consider the best way to go about doing it???
...
Go to the complete details ...