DEV Community

Discussion on: Developers Dilemma - Storing Passwords

Collapse
 
ajrom profile image
A.J. Romaniello

Thank you for your comments. Between you and Bailey I think I've decided to just buckle up and handle my own data and ensure it is secure.

I like what you said about how ( 'they probably used everywhere' ), because this is kind of my original thought on the matter. If they have a very weak password for an oauth application this could make it less secure, and vice versus.

I believe the best way to solve this is just by making sure the database is secure and rather not leave it up to a third party provider for authentication.