encrypt password in asp.net

My scenrio is encrypt password

for example:

User click on chage password link after that

User enter Username and New Password and then new password is in encrpypt form


        
            

                Change Password 
            
            
                
            

             
                
                    Username
                        
                
                
            
            
                
                    Password
                        
                
                
            

            
                
                    Confirm  Password

public static string EncodePasswordToBase64(string password) { try { byte[] encData_byte = new byte[password.Length]; encData_byte = System.Text.Encoding.UTF8.GetBytes(password); string encodedData = Convert.ToBase64String(encData_byte); return encodedData; } catch (Exception ex) { throw new Exception("Error in base64Encode" + ex.Message); } } protected void btn_Login_Click(object sender, EventArgs e) { DatabaseContext db = new DatabaseContext(); var bckofc = new Models.OfficeUser(); { try { SqlConnection con = new SqlConnection(ConfigurationManager.ConnectionStrings["Agri"].ToString()); } catch { } } try { string uid = txt_Username.Text; SqlConnection con = new SqlConnection(ConfigurationManager.ConnectionStrings["Agri"].ToString()); con.Open(); string qry = "select Id from officeUsers where Username='" + uid + "'"; SqlCommand cmd = new SqlCommand(qry, con); SqlDataReader sdr = cmd.ExecuteReader(); if (sdr.HasRows) { while (sdr.Read()) { Session["Username"] = uid; Session["Id"] = sdr["Id"]; } lblMessage.Text = EncodePasswordToBase64(txt_password.Text); } else { } con.Close(); } catch (Exception ex) { Response.Write(ex.Message); } db.OfficeUsers.Add(bckofc); db.SaveChanges(); }

Need help for this

Thanks in advance

To encrypt a password in ASP.NET, you can use the System.Security.Cryptography namespace which provides various encryption and decryption methods. One of the most commonly used methods is hashing.

Here's an example of how to hash a password using the SHA256 algorithm:

using System.Security.Cryptography;
using System.Text;

public static string HashPassword(string password)
{
    using (var sha256 = SHA256.Create())
    {
        var hashedBytes = sha256.ComputeHash(Encoding.UTF8.GetBytes(password));
        var hash = BitConverter.ToString(hashedBytes).Replace("-", "").ToLower();
        return hash;
    }
}

In this example, we create an instance of the SHA256 class and compute the hash of the UTF8-encoded password. The resulting hash is converted to a lowercase string without any dashes and returned.

To use this method, you can modify your btn_Login_Click event handler as follows:

protected void btn_Login_Click(object sender, EventArgs e)
{
    string username = txt_Username.Text;
    string password = txt_password.Text;

    string hashedPassword = HashPassword(password);

    // TODO: Check the username and hashed password against your database
}

Here, we first retrieve the username and password from the text boxes. Then, we use the HashPassword method to hash the password. Finally, you can compare the username and hashed password against your database to authenticate the user.

2 Replies

Know the answer? Post it — somebody with the same question will find it here.

Rajkiran Swain3y ago
Accepted answer
To encrypt a password in ASP.NET, you can use the System.Security.Cryptography namespace which provides various encryption and decryption methods. One of the most commonly used methods is hashing.

Here's an example of how to hash a password using the SHA256 algorithm:
```
using System.Security.Cryptography;
using System.Text;

public static string HashPassword(string password)
{
    using (var sha256 = SHA256.Create())
    {
        var hashedBytes = sha256.ComputeHash(Encoding.UTF8.GetBytes(password));
        var hash = BitConverter.ToString(hashedBytes).Replace("-", "").ToLower();
        return hash;
    }
}
```
In this example, we create an instance of the SHA256 class and compute the hash of the UTF8-encoded password. The resulting hash is converted to a lowercase string without any dashes and returned.

To use this method, you can modify your btn_Login_Click event handler as follows:
```
protected void btn_Login_Click(object sender, EventArgs e)
{
    string username = txt_Username.Text;
    string password = txt_password.Text;

    string hashedPassword = HashPassword(password);

    // TODO: Check the username and hashed password against your database
}
```
Here, we first retrieve the username and password from the text boxes. Then, we use the HashPassword method to hash the password. Finally, you can compare the username and hashed password against your database to authenticate the user.
+1
Rajeesh Menoth3y ago
Hi,

A simple example for encrypting & decrypt passwords:

https://www.c-sharpcorner.com/blogs/how-to-encrypt-or-decrypt-password-using-asp-net-with-c-sharp1
+1