# Secure password hashing in Go

DevFeed: [Secure password hashing in Go](<https://devfeed.tech/articles/secure-password-hashing-in-go-8078.md>)

Original publisher: [Read original article](<https://snyk.io/blog/secure-password-hashing-in-go/>)

Author: Love Bhardwaj

Published: 2023-12-05T17:00:00Z

Content type: tutorial

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [passwords](<https://devfeed.tech/topics/passwords.md>), [Go Language](<https://devfeed.tech/topics/go-language.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>), [Security](<https://devfeed.tech/topics/security.md>), [Encryption](<https://devfeed.tech/topics/encryption.md>)

Tags: [application-security](<https://devfeed.tech/tags/application-security.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [best-practices](<https://devfeed.tech/tags/best-practices.md>), [blog](<https://devfeed.tech/tags/blog.md>), [developer](<https://devfeed.tech/tags/developer.md>), [encryption](<https://devfeed.tech/tags/encryption.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [go](<https://devfeed.tech/tags/go.md>), [hashing](<https://devfeed.tech/tags/hashing.md>), [password](<https://devfeed.tech/tags/password.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

This tutorial explains secure password hashing in Go. It describes why credentials should not be stored as plaintext, how one-way hash functions protect passwords, how password verification compares a newly computed hash with the stored hash, and how hashing differs from reversible encryption used for other sensitive data. The supplied text begins discussing attack methods but ends before that discussion is complete.

## Source excerpt

December 5, 2023 User credentials are the information required to authenticate a user's identity and grant them access to a system or application. Typically, this includes a username or email address and a password. While a username can be stored as plaintext in a database, sensitive information like email addresses or passwords should not. If a malicious actor gains access to your database where you store this information, you don't want to hand over this information to them easily.