Search code examples
securityasp.net-mvc-4asp.net-identityhashcodepassword-encryption

ASP.NET MVC 4 Hash algorithm

Which Hash algorithm is being used by default in ASP.NET MVC 4 when using asp.net identity. How does it work? How secure is it?

Solution

  • ASP.NET Identity uses PBKDF2. It is implemented using Rfc2898DeriveBytes.

    This answere goes into some details of the how and why. This is a very broad question and the answer can span many many pages. Perhaps you can google about the specifics yourself. I tried googling and there is a ton you can read about depending on your level of curiosity.