Tag: password

• Auditing SQL Server Password Strength using PWDCOMPARE

  

  2014-06-27 - DMVs & CVs, General, Passwords, Security, Security

  SQL Server stores passwords as salted hash values, preventing us from directly checking or enforcing their strength. However, using PWDCOMPARE we can try to crack them to identify weak ones.

  [more…]

• How to Pick a Good Password

  

  2014-04-21 - General, Security

  Do you know why you care about picking a good password and why reusing a password is a bad idea, even if you think your life is boring to a would-be hacker. Read on to discover how hackers get a hold of long lists of usernames and passwords and that a hack on a random page you might have used once can be a real threat to your online life.

  [more…]

• How to Re-Create a Login with only a Hashed Password

  

  2014-04-13 - General, Security

  To re-create a login on a different SQL Server instance while preserving the password you can use the CREATE LOGIN statement with the hashed password. Read on for a detailed explanation.

  [more…]

• How to Change a SQL Login’s Password

  

  2014-04-04 - Fundamentals, General, Security

  ALTER LOGIN can be used to change the password of a SQL Login. Read on to see the required permissions and what you need to do to change your own password.

  [more…]

• Salt – Preventing Rainbow Attacks against Password Stores

  

  2014-03-31 - Cryptographic Terminology, Cryptography, General, Security, Series

  What is a Salt Value and how does it help to protect the stored passwords of your application’s users from attacks involving Rainbow Tables? Read on to find out now.

  [more…]