Mid From PDF ASP.NET Core ASP.NET Core

Securing password storage?

Q: Securing password storage?

Short answer: ASP.NET Core Identity uses PBKDF2 hashing by default. Best practices: Never store plaintext passwords Use salted + hashed storage Use PasswordHasher or Identity defaults Use: PasswordHasher .HashPassword(user, password) Can switch to Argon2, Bcrypt via custom password hasher. Real-world example (ShopNest) A ShopNest checkout request flows through middleware, hits a minimal API or controller, uses scoped services, and returns ProblemDetails on errors. Say this in the interview Define — one clear sentence (the short answer above). Example — relate it to a project like ShopNest or your real work. Trade-off — when you would not use it.

Short answer: ASP.NET Core Identity uses PBKDF2 hashing by default. Best practices: Never store plaintext passwords Use salted + hashed storage Use PasswordHasher<T> or Identity defaults Use: PasswordHasher<T>.HashPassword(user, password) Can switch to Argon2, Bcrypt via custom password hasher.

Real-world example (ShopNest)

A ShopNest checkout request flows through middleware, hits a minimal API or controller, uses scoped services, and returns ProblemDetails on errors.

Say this in the interview

Define — one clear sentence (the short answer above).
Example — relate it to a project like ShopNest or your real work.
Trade-off — when you would not use it.

Previous Next