your database ever becomes compromised you're not just leaking the raw plaintext passwords of all of your users when you hash it you can at least obscure some of the details and especially if you're using a password salt so you first append some string that you know to the users password and then you hash that whole set together that really obscures that such that even if the hashes get leaked and another website somewhere else is using the same hashing algorithm that the password saw at least will be unique to your own domain your own project and so that will protect the users credentials from being leaked at least elsewhere beyond your own website and even if you have a password authentication system attackers may sometime try to just brute force their way in by randomly guessing a number of common passwords so in this scenario you can either rate limit the passwords or implement like a CAPTCHA system overall though my recommendation may be to not even implement a user authentication system if it works for a project just use like google firebase authentication Apple ID Facebook Connect something like that and then you don't have to deal with the headaches of securing your authentication system now my sixth security tip has to do with making a website more secure for your users especially anytime you're trying to collect the payment you want to make sure that that connection is encrypted over HTTPS so these days many websites are served over HTTPS but if they're not just using standard HTTP then that Internet traffic is unencrypted and the attacker can be sniffing on that Network and read all of the Internet traffic you said they like your passwords credit card details so one way to quickly secure your web application is to get an SSL certificate personally I use this open source project SSL and they just get free certificates from let's encrypt so then you can enable your web application for HTTPS encryption over the Internet now moving on to the seventh way I've been hacked and this may have happened to some of you as well if you've ever installed your own WordPress blog website they you know that WordPress has so many security issues and every now and then one of your WordPress websites or blogs they just get compromised and then they usually issue some security patch but it's a lot of maintenance and especially if you install some WordPress blog or website and then you forget about that you don't go back to it you've essentially installed a security loophole into your system what I've done is I've gone through and scrubbed my entire system of WordPress blogs websites and plugins and any other projects like free bulletin board systems free blog websites and so my overall recommendation here is well you can also just pay WordPress a small fee and they'll host your blog for you and they'll make sure that it is completely secure you don't necessarily want to be the person managing running and updating all of your own email servers your websites your blogs chat servers because that could be a security risk and if you do run these services then you need to be willing to put in the time to keep these updated and maintained and one more tip cents you never really know if you're secure there could be zero day exploits then it may help to make backups so get another machine copy all of your data user data project files over to this machine such that even if one machine is compromised then you're still going to have your data and you'll be able to restore it in the worst case scenario your data is one of your most important assets so secure it with dashlane
START_SPONSOR_TOKEN data is one of your most important assets so secure it with dashlane END_SPONSOR_TOKEN