We were just shown this as a part of an information systems security lecture, I figured I'd actually go ahead and give it a like because it's simple and informative

Thank you, Sir! It did helped me a lot in learning how hash functions actually work! And also Thank You for simplifying the concept!

Keep up the good work mate, it was informative.

Brilliant video.. I love how you explain such complex concepts in a simple manner.. Please keep up the good work

AMAZING. really appreciated you goign through drop Box's encryption method. started coding 8-9 months ago, doing JS now and just started learning how to use the scrypt function as well as salting passwords etc... watching this video made me excited for all the deeper things you can do... maybe one day i shall make it a goal to recreate and code that level of password security like dropbox has! cool vid. thanks again anyone wanna share their experience with coding thus far? anyone think im doin ok learning this stuff after 8 months? or am i behind.... lol... sometimes i can't tell tbh i still love learning all this stuff regardless lol

Wow, I can't believe how well you explained that! Thank you sir!

Great job. I love every single one of your videos!

Great as always! Please keep sharing such a good stuff!

the channel name is perfect thanks dude. 💖

Awesome video - very easy to understand and succinct, it flowed well too - very helpful thank you!

This is awesome man, thanks for explaining.

You really explain things simply ✌️

amazing video. learnt a lot, going to share :-)

Reallly informative! Thanks!

Learned a great deal of things thanks to this video. Thank you.

Very interesting video ! Thank you for all this nice work.

Thank you very much for this video! Certainly learnt a lot from this and would be learning more about it in detail :)

awesome video! Thank you!

clear and easy to understand this is perfect

Amazing video, thank you so much mate!

Very nice descreption. Loved it. Thank you very much ❤❤❤

This video was incredible, thank u so much

Awesome video, very friendly and pleasant to watch! about dropbox- if they're not saving the keys in their db's, where do they save them? physical devices maybe?

nice video and very well explalined - thanks a lot!!!! :)😁👍✌️

Excellent and clear explanation.

very informative . best explanation . keep it up!!!

Very informative one.. Liked it.. Well explained!! 💯

This is the first video I saw of you!

Wow. perfect video!!

Great video!

Simple and explains a lot thank you :)

Wow so interesting. Really enjoyed this vid

Explained very simply thank you

It's very nice video.. thanks for your efforts and keep it going

Very well explained, thanks

thank you, very clear!

Thank you sir Nice explain !!! thumb up

Well, it was really helpful video

Great video - thank you

Great video! thanks

Best explanation

Excellent explanation

thank u man it helped a lot ...!

Awesome, thank you :)

Good job. Studying for Security+ exam here and the cryptography has been one thing I've found it hard to get into. It helps to have different explanations of it.

Nice video man.

Excellent work

Very educative video :)

keep up the good work :D

So awesome!

thank you very much for the instructional - learned a lot (specially w/the salt & cost things). Nice !!! Furthermore, your voice is very pleasant so double congrats!

very well explained

I use a extremely long custom hashing method for my server that uses many variables indented to that user only

wow......thank you so much...keep it up plzzz

Keep up the great work..!

Good work.

Thank you

great video

Very clear explanation , well done

Cyber Security Dev: So which password protection do you want to use? Dropbox: y e s

Excellent content

thank you so much.

thank you 😍

Savjee next video should be about delegated proof of stake

solid info :D

Thanks 👌👀

brilliant

NICE VIDEO

nice!

very good video , I learned the concepts in a very good way... can you kindly do a simple javascript project to make the 3 kind of protection (hashing + bcrypt + encryption) to show us how to do it practically as well

thank you so much for this vid it is very informative

this video is underrated

i was wondering how to make a vivid video like this, what kind of software tool

thanks agfain...

u are best

Nice work. Thanks for helping to clear this up.

My encryption/decryption algorithms I have (for PHP) take in a string, add some salt, some hashing and then locks it with a key then encrypts or decrypts that with a very “quarantined” password that’s been... Treated. It’s strong asf.

tanks dude

Just like the channel's name, Simply Explained!

Nice video! I have a question: what about saving each password with its encrypted version, using the password itself as encryption key? This way each stored password would have a unique encryption key, instead of a single AES key shared among all the saved passwords.

Thanks a lot for the succinct adumbration. And by the way. 04:11 ROFL 😂

PLEASE do a video on Ripple!

danku wel

Excellent video and explaining the technology. However, I have a situation where I don't know how I would adapt the concepts you explained because the scenario is slightly different. Your example works interactively by comparing user passwords with stored hash values. My scenario is for an automated process (no user interaction at all) and the credentials are self-contained in the program package. These must not be known to the user or anyone who can get a hold of the file(s) containing them. Here is a live example … We have a company application that requires administrative rights to execute but our users only have standard Windows user permissions. I repackaged the application into a single EXE executable script to conceal the admin credentials that are included in the script code. However, I discovered that compiling the script is not enough because the EXE file can be decompiled or someone can use other programs to see the contents. How can I adapt the concepts you explained in your video this my scenario? I need to be able to execute a self-contained application package locally (no network or internet resources) and with specific credentials while protecting said credentials from the local user or anyone who might get a hold of the EXE file containing the credentials. The application needs to use these credentials at run time to perform its tasks. Your insight is most appreciated.

Is hashing possible for other things like live facial recognition or fingerprints?

top man

How secure is smashing the keyboard at random while alternating the shift key?

Change the unique hash stored on the database for the same password the user uses, every time the user signs in?

When you put up that list of the top 10 passwords, I was like, “been there, done that” 😂. These days I let my Apple devices generate and store codes for me

what do they do with the salted hash?

on 'TamaTown Rewrtten' ii do sha512 then xor the resulting hash with some random bytes then sha512 it again the original game however stored them in plaintext as there reset pass thing expects to just.. get the password back

You mentioned something about encryption key being kept separately, how can it be queried to work on the web application? Kindly put more light

They should make a hash system that resets every hour

Well explained! Why don't companies put a limit on number of login trials a computer can have? For example, can't they just reject the user for a limited period of time if they enter totally wrong credentials?

How to get the hash text?

so regardless of the fact that each of these different methods can be breached, best course of action is to have two forms of logging in to your account a text message to your phone that you have to input when logging in to an account.

Not only to maintain unique hashes...salting also provides extra security for example you can either append or prepend salt data..that requires lot of effort from hacker to figure out

Man, great job there. How do you do it? I would love to the the animations in portuguese. I feel it's missing here in Brazil the way you explain.

On 4:38 you said to use different salt but I can't see it happening. If I use different salt, when I have to check the password, I would not know the used hash. If I keep it on the database, I would have the same problem as leaking the password. What I'm missing?

Excellent video but I am not understanding something: You use salt to generate a unique hash from a password (string). When a user re-logins and you want to see the hash of his password you would also have to RE-ADD that same "unique salt" that was given when the user created the account. How do you know that "unique salt" if it was randomly generated?