mardi 24 février 2015

Should a "secret access code" use the same security as a normal password?

Obviously, when you store a password, you should use something bcrypt before you store it in in the database.


But I have a client who wants to add the ability to add a "secret code" to each database entry that a user will have to enter before gaining access to that entry.


The "secret key" isn't exactly as critical as a password, so should I bcrypt this secret code, or does it even need it?


Aucun commentaire:

Enregistrer un commentaire