Encrypting password fields in SQL Server

I have received a request to have a password field inside of a database table encrypted. The user would like to also be able to decrypt the field when validating users. What is the best way to go about doing this? Does it require a third-party application?

    Requires Free Membership to View

    Login

It doesn't require a 3rd party application. You can do this yourself. All it requires is for you to utilize an encryption algorithm in your application. Data coming in is encrypted and then sent on to the SQL Server where it is stored. When a validating a user, it passes through your application where the process is reversed. I would very strongly recommend that when you are doing this, that algorithm is locked up and very tightly controlled. In no case should it ever be used to allow a user to decrypt the data and view it in a report or via some other manner. Once encrypted, the data should always be encrypted except during validation processes within your application which never retains the password. There is a third-party tool that can do this for you as well called Encryptionizer.

For More Information

This was first published in October 2003

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.
    Back to top