encrypt password in asp.net

Question

My scenrio is encrypt password for example: User click on chage password link after that User enter Username and New Password and then new password is in encrpypt form Change Password Username Password Confirm Password public static string EncodePasswordToBase64(string password) { try { byte[] encData_byte = new byte[password.Length]; encData_byte = System.Text.Encoding.UTF8.GetBytes(password); string encodedData = Convert.ToBase64String(encData_byte); return encodedData; } catch (Exception ex) { throw new Exception("Error in base64Encode" + ex.Message); } } protected void btn_Login_Click(object sender, EventArgs e) { DatabaseContext db = new DatabaseContext(); var bckofc = new Models.OfficeUser(); { try { SqlConnection con = new SqlConnection(ConfigurationManager.ConnectionStrings["Agri"].ToString()); } catch { } } try { string uid = txt_Username.Text; SqlConnection con = new SqlConnection(ConfigurationManager.ConnectionStrings["Agri"].ToString()); con.Open(); string qry = "select Id from officeUsers where Username='" + uid + "'"; SqlCommand cmd = new SqlCommand(qry, con); SqlDataReader sdr = cmd.ExecuteReader(); if (sdr.HasRows) { while (sdr.Read()) { Session["Username"] = uid; Session["Id"] = sdr["Id"]; } lblMessage.Text = EncodePasswordToBase64(txt_password.Text); } else { } con.Close(); } catch (Exception ex) { Response.Write(ex.Message); } db.OfficeUsers.Add(bckofc); db.SaveChanges(); } Need help for this Thanks in advance

Rajkiran Swain · Answer

To encrypt a password in ASP.NET, you can use the System.Security.Cryptography namespace which provides various encryption and decryption methods. One of the most commonly used methods is hashing. Here's an example of how to hash a password using the SHA256 algorithm: using System.Security.Cryptography; using System.Text; public static string HashPassword(string password) { using (var sha256 = SHA256.Create()) { var hashedBytes = sha256.ComputeHash(Encoding.UTF8.GetBytes(password)); var hash = BitConverter.ToString(hashedBytes).Replace("-", "").ToLower(); return hash; } } In this example, we create an instance of the SHA256 class and compute the hash of the UTF8-encoded password. The resulting hash is converted to a lowercase string without any dashes and returned. To use this method, you can modify your btn_Login_Click event handler as follows: protected void btn_Login_Click(object sender, EventArgs e) { string username = txt_Username.Text; string password = txt_password.Text; string hashedPassword = HashPassword(password); // TODO: Check the username and hashed password against your database } Here, we first retrieve the username and password from the text boxes. Then, we use the HashPassword method to hash the password. Finally, you can compare the username and hashed password against your database to authenticate the user.

Rajeesh Menoth · Answer

Hi, A simple example for encrypting & decrypt passwords: https://www.c-sharpcorner.com/blogs/how-to-encrypt-or-decrypt-password-using-asp-net-with-c-sharp1