I’m making desktop application (lets call it app) which uses database (mysql).
More app’s users share one database user.
Example : John and Mike app users connect to DB as “dbuser”, etc.
The problem is : How do I effectively save passwords for DB users? (app users’s pwds are stored in DB).
Possible solutions I found :
1. in the code – this is actually pretty stupid 😀
2. in the text INI file – easy to read!
3. encrypted in extern file – good, but need access to app.
Encrypt stored passwords using SHA1/SHA2 algorithm. This is the most used technique.
I’m not a .NET developer but I’m pretty sure that they provide the function somewhere.
When user logs in, encrypt again the given password and compare it to the stored one. If they are equal, let the user log in.