What is Password Hashing?

AllSecurity
Hashing is a one way process where your plain-text password is run through a complex algoritm to result in a fixed-length hash instead.

This is what a small table of MD5 hashed passwords would look like. The passwords are not in plain text, each is its own 32 character string.






To generate a hash based on your plain-text password you run your plain-text password through the MD5 algorithm, and returns a 32 character output. 
MD5 Hashing




This means when you try to log in to an application or site that utilizes MD5 Hashing, your plain-text password is run through this algorithm, and the resulting hash is compared to the password hash stored in the database. 

If the hash matches then you would successfully authenticate and be permitted access.
 



Awesome! Problem solved, right?
Not quite...
While your password isnt stored in clear text, and it isnt reversable it can be queried against a rainbow table, and still need to add in some salting.


I apologize if anyone thought this would be an extensive breakdown of the hashing algorithm itself, I'm not a math guy, but feel free to give it a read here: Hashing Algorithm

Categories: All, Security