Solved

Encrypting password field in a table

Posted on 2011-02-17
12
626 Views
Last Modified: 2012-06-22
Hello Experts,

I've created a login form which stores the login information in a table. I would like to encrypt the passwords. I'm very confused, after doing some web research, it seems like everybody has a different idea, but I coudn't find any complete solution which I could follow.

Any help will be appreciated very much.
0
Comment
Question by:hello_everybody
  • 4
  • 2
  • 2
  • +2
12 Comments
 
LVL 119

Assisted Solution

by:Rey Obrero
Rey Obrero earned 20 total points
ID: 34915685
see this link,
http://support.microsoft.com/?kbid=209871

it has a function "Function KeyCode" that encrypts/decrypts a password
0
 
LVL 8

Author Comment

by:hello_everybody
ID: 34915731
Thanks for the quick response. The article you've pointed me to deals with password protecting a form or report. How would I implement that in a password field in a table?
0
 
LVL 119

Expert Comment

by:Rey Obrero
ID: 34915745
didn't you read the part

"it has a function "Function KeyCode" that encrypts/decrypts a password"
0
 
LVL 84

Assisted Solution

by:Scott McDaniel (Microsoft Access MVP - EE MVE )
Scott McDaniel (Microsoft Access MVP - EE MVE ) earned 30 total points
ID: 34915748
To provide a little more detail:

Access cannot do this natively, so you must take measures similar to the link capricorn posted to do this. You'll have to do this manually - that is, you'll have to work with an unbound Textbox for the Password control, and then Encrypt/Decrypt the password value via code. You can have a bound, hidden field on the form that is used to store and retrieve the password, of course, and that's probably the best way to manage this.

You'd then use the AfterUpdate event of your password Textbox to move data in and out of that field, calling the Encrypt/Decrypt functions as needed. Basically, in the AFterUpdate event of your control, you'd first validate the Password (i.e. you'd "decrypt" the stored value, and compare it to what the user typed in), and then take action as needed (i.e. let the user continue, or alert them that something is wrong with the entered password).
0
 
LVL 49

Assisted Solution

by:Gustav Brock
Gustav Brock earned 50 total points
ID: 34918126
What you should do is to create a MD5 hash of the password and store that.
By doing so, you don't even store the password and there is no way to retrieve it, only reset it.

To check a password, create the MD5 hash of and compare with the stored hash; if match, the password is correct.

Proceed with code here:
http://stackoverflow.com/questions/125785/password-hash-function-for-excel-vba

/gustav
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 21
ID: 34919672
@gustav,

I was recently told that in a EE newsletter it stated that we are not supposed to provide external links except to MSDN articles.  Have you heard this?  
0
 
LVL 21

Accepted Solution

by:
Boyd (HiTechCoach) Trimmell, Microsoft Access MVP earned 400 total points
ID: 34919771
If you would like to see a working Access example, here is what I use to encrypt passwords : Encryption:

0
 
LVL 49

Expert Comment

by:Gustav Brock
ID: 34920629
> Have you heard this?  

No. Can't be true. This is not a sandbox, there is a world out there.

/gustav
0
 
LVL 21
ID: 34923446
SouthMod,

Thank you for the information . Great advice.  I will gladly  follow it.

I want to be sure that I am following the rules while  doing my best to answer  questions.with the best advice I know.

I had another expert get upset with me for posting an external link.  I was baffled by the response.

Thank you for clearing this up.
0
 
LVL 8

Author Comment

by:hello_everybody
ID: 34935985
Thank you all for your input.
I have an urgent project that came up so this is on hold for the time being, hopefully I'll get back to it sometime this week.
0
 
LVL 21
ID: 34936004
Thanks for the update.
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

This article is a continuation or rather an extension from Cascading Combos (http://www.experts-exchange.com/A_5949.html) and builds on examples developed in detail there. It should be understandable alone, but I recommend reading the previous artic…
In a multiple monitor setup, if you don't want to use AutoCenter to position your popup forms, you have a problem: where will they appear?  Sometimes you may have an additional problem: where the devil did they go?  If you last had a popup form open…
Familiarize people with the process of utilizing SQL Server views from within Microsoft Access. Microsoft Access is a very powerful client/server development tool. One of the SQL Server objects that you can interact with from within Microsoft Access…
Learn how to number pages in an Access report over each group. Activate two pass printing by referencing the pages property: Add code to the Page Footers OnFormat event to capture the pages as there occur for each group. Use the pages property to …

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now