Question

I’m using play-framework 2.0 (java web-framework) with postgresql.

1. what encryption type for a user’s password is the most common today? I understood that MD5 has been abounded in the last few years.
2. what is the right data-type for field “password” in User class (and therefore, in the postgresql DB)?

thanks

Answer 1

You want to hash the password, not encrypt it (See this question for more details). The current recommended approach is to use an adaptive hashing algorithm, like bcrypt. jBcrypt is a solid Java implementation that you can use.

As for DB type, you can safely just treat it as a string.