aspose file tools
The moose likes JDBC and the fly likes How to store  userName and password in Database? Big Moose Saloon
  Search | Java FAQ | Recent Topics
Register / Login
JavaRanch » Java Forums » Databases » JDBC
Reply Bookmark "How to store  userName and password in Database?" Watch "How to store  userName and password in Database?" New topic
Author

How to store userName and password in Database?

narender kaasam
Greenhorn

Joined: May 15, 2006
Posts: 28
Hi Any one could you tell me how to store "username" , "password" in database?I mean if we store directly as text then there is no security for "username" and "password" ?
Masoud Kalali
Author
Ranch Hand

Joined: Jul 08, 2004
Posts: 531

best practice is to encrypt the user name and pasword or at least the passwords .
it will protect your users sensetive data in case of any database bridge , many net users use a unified username and password for all places that they register..


Masoud Kalali
Software Engineer - My Weblog - GlassFish Security
Scott Selikoff
Saloon Keeper

Joined: Oct 23, 2005
Posts: 3652

One way to store it such that a user cannot just go into the database and edit it is to use the 'RAW' type.

Although, real encryption often requires an encryption module of some kind. Some Application Servers provide such tools for you whereas others you need to write yourself. Even if you have to write something yourself, at the most it should be a helper method into a certificate. If you start inventing your own encryption/decryption algorithm you've gone too far.


My Blog: Down Home Country Coding with Scott Selikoff
 
I agree. Here's the link: http://ej-technologies/jprofiler - if it wasn't for jprofiler, we would need to run our stuff on 16 servers instead of 3.
 
subject: How to store userName and password in Database?
 
Similar Threads
checking valid database connection
Passing user and password in Oracle RAC url
jsp to xml
hi
How to store userName and password in Database?