Thread: Vencillio Password hashing

i'm sure java provides some libraries you can use for this

additionally, here's a good link to check out (with lots of examples): [Only registered and activated users can see links. ]

as fire cape mentioned I wouldn't use md5 as it's not very secure anymore

Use this depedency

Code:

<groupId>org.springframework.security</groupId>
            <artifactId>spring-security-crypto</artifactId>

And when you do your login do this

Code:

BCrypt.hashpw(password, BCrypt.gensalt(12))

The 12 stands for how strong you want the hashing to be, the higher the number, the longer it will take for this to finish. 10 is the normal number of rounds, I did 12 just to make it a tad stronger. Even going up +1 takes a considerable longer amount of time from the previous.

And to check if your password is correct do this

Code:

BCrypt.checkpw(password, player.getPassword())

Obviously change what you need to fit your server but yeah super easy