Password Hasher

The Password Hasher tool allows you to create a password hash suitable for storing in a configuration file.

When configuring the <authentication> element in web.config you might want to hash a password to protect it from prying eyes. The hashed password cannot be reverse engineered. It is vulnerable to dictionary attacks, though, so choose passwords that are hard or impossible to guess.

Consider the following example:

<credentials passwordFormat="SHA1">
    <user name="Kim"
          password="D8A2B2F87D8AF39B0D899CB410D6DDF0A3EEE424"/>
</credentials>

In this example Kim's password, a3IR7e, was hashed with the SHA1 algorithm. For more information see Forms Authentication Credentials