{"id":24770,"date":"2019-03-28T16:26:18","date_gmt":"2019-03-28T20:26:18","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=24770"},"modified":"2019-03-28T16:26:18","modified_gmt":"2019-03-28T20:26:18","slug":"user-account-best-practices","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2019\/03\/28\/user-account-best-practices\/","title":{"rendered":"User Account Best Practices"},"content":{"rendered":"<p><a href=\"https:\/\/twitter.com\/davedelong\/status\/1110645220301914112\">Dave DeLong<\/a>:<\/p>\n<blockquote cite=\"https:\/\/twitter.com\/davedelong\/status\/1110645220301914112\">\n<p>Let&rsquo;s say, hypothetically, that I wanted to create a &ldquo;user account&rdquo; feature for an app.<\/p>\n<p>Where should I go to read up on best practices for safely storing the user&rsquo;s password on the backend?<\/p>\n<\/blockquote>\n\n<p><a href=\"https:\/\/twitter.com\/cmkilger\/status\/1110645738877280257\">Cory Kilger<\/a>:<\/p>\n<blockquote cite=\"https:\/\/twitter.com\/cmkilger\/status\/1110645738877280257\">\n<p>I&rsquo;ve found <a href=\"https:\/\/crackstation.net\/hashing-security.htm\">this<\/a> to be a good guide.<\/p>\n<\/blockquote>\n\n<p><a href=\"https:\/\/twitter.com\/ThomasBaigneres\/status\/1110659195928539136\">Thomas Baign&egrave;res<\/a>:<\/p>\n<blockquote cite=\"https:\/\/twitter.com\/ThomasBaigneres\/status\/1110659195928539136\">\n<p>You should definitely have a look at <a href=\"https:\/\/blog.cryptographyengineering.com\/2018\/10\/19\/lets-talk-about-pake\/\">PAKE<\/a>.<\/p>\n<\/blockquote>\n\n<p><a href=\"https:\/\/twitter.com\/jabwd\/status\/1110659371237822464\">Antwan van Houdt<\/a>:<\/p>\n<blockquote cite=\"https:\/\/twitter.com\/jabwd\/status\/1110659371237822464\">\n<p>This is also a <a href=\"https:\/\/security.stackexchange.com\/questions\/211\/how-to-securely-hash-passwords\/31846\">great post about it<\/a> but its pretty long, so nice reading material :)<\/p>\n<\/blockquote>","protected":false},"excerpt":{"rendered":"<p>Dave DeLong: Let&rsquo;s say, hypothetically, that I wanted to create a &ldquo;user account&rdquo; feature for an app. Where should I go to read up on best practices for safely storing the user&rsquo;s password on the backend? Cory Kilger: I&rsquo;ve found this to be a good guide. Thomas Baign&egrave;res: You should definitely have a look at [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"apple_news_api_created_at":"2019-03-28T20:26:21Z","apple_news_api_id":"cfb6522a-296b-4273-8398-3557d637ef58","apple_news_api_modified_at":"2019-03-28T20:26:21Z","apple_news_api_revision":"AAAAAAAAAAD\/\/\/\/\/\/\/\/\/\/w==","apple_news_api_share_url":"https:\/\/apple.news\/Az7ZSKilrQnODmDVX1jfvWA","apple_news_coverimage":0,"apple_news_coverimage_caption":"","apple_news_is_hidden":false,"apple_news_is_paid":false,"apple_news_is_preview":false,"apple_news_is_sponsored":false,"apple_news_maturity_rating":"","apple_news_metadata":"\"\"","apple_news_pullquote":"","apple_news_pullquote_position":"","apple_news_slug":"","apple_news_sections":"\"\"","apple_news_suppress_video_url":false,"apple_news_use_image_component":false,"footnotes":""},"categories":[4],"tags":[31,1610,981,71,96],"class_list":["post-24770","post","type-post","status-publish","format-standard","hentry","category-programming-category","tag-ios","tag-ios-12","tag-passwords","tag-programming","tag-web"],"apple_news_notices":[],"_links":{"self":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/24770","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/comments?post=24770"}],"version-history":[{"count":1,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/24770\/revisions"}],"predecessor-version":[{"id":24771,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/24770\/revisions\/24771"}],"wp:attachment":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/media?parent=24770"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/categories?post=24770"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/tags?post=24770"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}