I used to think about a problem when I was a computer. I entered my password when I went online. Will the website administrator see my password?
Recently, I started to register and log on to the system as a Website user. This problem occurs.
I checked the book and found that there are still some methods, as long as FormsAuthentication is used. hashPasswordForStoringInConfigFile method (namespace: System. web. security). It can generate a hash password suitable for storing in the configuration file based on the specified password and hash algorithm.
[MSDN] It is easy to use. For example, if we want to convert the string in the passWord textbox into a complicated hash passWord and store it in pwd, we can do this:
Using System. Web. Security;
String pwd = FormsAuthentication. HashPasswordForStoringInConfigFile (passWord. Text, "MD5 ");
Such a simple password is converted into a complex string of characters, so that the user's password cannot be seen in the database.
From Link_King_Jay