Security

How are passwords stored in OneVu?

All user and customer account passwords are stored in the database using a one-way hash function. The implementation of this hashing algorithm is part of the Microsoft AspNetIdentity library and uses PBKDF2 with HMAC-SHA1, 128-bit salt, 256-bit subkey and 1000 iterations.

 

Further details of the implementation can be found here:

https://github.com/aspnet/AspNetIdentity/blob/master/src/Microsoft.AspNet.Identity.Core/Crypto.cs