Securely storing passwords in the database
The year is 2018 and by now we've probably all heard dozens of stories about companies leaking our sensitive data, including passwords, to hackers. In a lot of these cases, the passwords that were leaked were stored with extremely poor cryptography, meaning that they could be cracked with ease. In some cases, the passwords were even stored in plain text!
Either way, this negligence has led to the leak of millions of users' email and password combinations. This would not be such an issue if we used different passwords for every online account we made... but unfortunately, we are lazy and password reuse is quite common practice. Therefore, the responsibility for mitigating some of the damage done by hackers infiltrating our servers falls to us, the developers.
In October 2016, the popular video sharing platform Dailymotion suffered a data breach in which 85 million accounts were stolen. Of those 85 million accounts, 18 million had passwords attached...
