Java: Salting and BCrypt
Why do teams use BCrypt for hashing passwords in production code?
BCrypt is designed to be slow and resource-intensive to resist brute-force attacks. BCrypt's intentional slowness makes it more…
View Card →Quick study sessions to strengthen memory and retain key concepts.
Why do teams use BCrypt for hashing passwords in production code?
BCrypt is designed to be slow and resource-intensive to resist brute-force attacks. BCrypt's intentional slowness makes it more…
View Card →Why should passwords never be stored in plaintext?
Plaintext passwords are easily exposed in data breaches. Storing passwords in plaintext means that if a database is…
View Card →How do CSRF tokens protect web applications?
They verify the legitimacy of user actions. CSRF tokens prevent unauthorized commands by embedding a token in forms…
View Card →How do prepared statements mitigate SQL injection risks?
They separate SQL logic from data inputs. Frame the concept in practical terms so you can explain it…
View Card →Explain the Spring Security Filter Chain's role in application security?
It processes and secures incoming requests. The Spring Security Filter Chain is a series of filters that intercept…
View Card →What components make up a stateless JWT token?
Header, Payload, Signature. Frame the concept in practical terms so you can explain it during interview discussion. A…
View Card →Why does the BCrypt work factor in password hashing matter in practice?
It determines the computational complexity of hashing. The BCrypt work factor controls how much computational effort is needed…
View Card →How does salting a password improve its security?
Salting adds randomness to passwords, preventing hash collisions. Salting involves adding a unique random value to each password…
View Card →Describe the concept of one-way hash functions in password security?
Hash functions convert plaintext to a fixed-size string that's hard to reverse. One-way hash functions are used to…
View Card →Why is storing passwords in plaintext a security risk?
Plaintext passwords are vulnerable to theft. Storing passwords in plaintext means if the database is compromised, attackers can…
View Card →