intermediate~2h
Password Security: Encoding, Encryption & Hashing
"Just hash the password" hides three genuinely different techniques with very different security properties. This chapter is why only one of the three (hashing) is ever correct for passwords.
Learning objectives
- Beginner: Explain why encoding (like Base64) is not a security mechanism at all.
- Intermediate: Configure and use Spring Security's PasswordEncoder correctly for storing and verifying passwords.
- Advanced: Explain what CompromisedPasswordChecker adds on top of correct hashing, and why hashing alone isn't sufficient defense.
This is a Pro chapter
Sign in, then upgrade to Pro or Power to unlock this and the full Spring Ecosystem Mastery library.
Password Security: Encoding, Encryption & Hashing