Cybersecurity Guidelines for FSTI Providers
a) Authentication or hashing password
•
Hashing Password: - Use strong cryptographic hashing algorithms (e.g., bcrypt, Argon2, PBKDF2) to hash passwords before storing them in the database, ensuring that the actual passwords cannot be easily recovered even if the database is compromised. - Implement a salt mechanism to add random data to each password before hashing. This prevents hackers from using precomputed tables (rainbow tables) to crack the hashes. Masking Passwords in User Interfaces: - Always display passwords as asterisks (*) or dots (•) during login and registration. - Provide an option to show or hide the password to balance usability and security, but ensure the default state is hidden. Secure Transmission of Passwords: - Use Hypertext Transfer Protocol Secure (HTTPS) to encrypt data transmitted between client and server, ensuring that passwords are protected during transit. - Implement additional measures like HTTP Strict Transport Security (HSTS) to force secure connections.
•
•
26
Made with FlippingBook. PDF to flipbook with ease