So I’m making a website for a game. Nothing that will get popular 😛
Right now I’m thinking about password security, I’m gonna use salting but
instead of adding a new column in account table I was thinking about using the account name as salt since it cant be changed, and is “unique”. I mean 2 users cant have the same account name.
But I was thinking how safe it would be if lets say someone has the account name banana. I mean that word gotta be popular in these wordlist hackers use.
Lets say the account name is banana and the password is hello (hashed with sha1), that would be pretty easy to reverse am i right?
No, you should follow standard practice and generate a new unique salt per user, and just store it right along side the other fields in the database, it’s not hard to do.