Making a Hash of Passwords

Last week, I went to a project meeting so I could provide security insights as some consulting software developers updated us on the customer-facing application they’re building for us. But I was dumbfounded when they asked me, “How should we encrypt the passwords?” Will developers never learn? It could well be that the developers thought I would be impressed that they were thinking about security. After all, they wanted to encrypt the passwords their database would collect. I’m sorr