Saving asp.net encrypted password to sql database

Question

. I want to save the password in the asp.net user registration form in an encrypted format to the sql database.
I'm waiting for your help public ActionResult InsertDetails() { return View(); } // Calling on http post (on Submit) [HttpPost] public ActionResult InsertDetails(Register obj) { Register objreg = new Register(); string result = objreg.InsertRegDetails(obj); ViewData["result"] = result; ModelState.Clear(); return RedirectToAction("Index", "Photos"); } -----My model----- public class Register { public int User_ID { get; set; } public string UserPicturePath { get; set; } public string E_Mail { get; set; } public string User_Name { get; set; } public string Password { get; set; } public Nullable DateBirth { get; set; } public string Country { get; set; } public string City { get; set; } public string MentionAbout { get; set; } public Nullable CreationDate { get; set; } SqlConnection con = new SqlConnection("Server=.;Database=IMAGESBILBOARD;Trusted_Connection=True;"); SqlCommand cmd = new SqlCommand(); public string InsertRegDetails(Register obj) { cmd.CommandText = "Insert into [UsersInfo] values('" + obj.UserPicturePath + "','" + obj.E_Mail + "','" + obj.User_Name + "','" + obj.Password + "','" + obj.DateBirth + "','" + obj.Country + "','" + obj.City + "','" + obj.MentionAbout + "','" + obj.CreationDate + "')"; cmd.Connection = con; try { con.Open(); cmd.ExecuteNonQuery(); con.Close(); return "Success"; } catch (Exception es) { throw es; } } }

Sachin Singh · Accepted Answer

// install simpleCrypto from nuget
blic void Save(User user)
{
YourDbContext db = new YourDbContext();
User User = new User();
User.UserName = user.UserName;
var crypto = new SimpleCrypto.PBKDF2();
var EncryptedPassword = crypto.Compute(user.Password); // password includes salt , you will need this salt to compare psd in future.
var Salt = crypto.Salt; // this is the salt that has been used behind the scene.
User.Password = EncryptPassword;
User.Salt = Salt;
db.Users.Add(User);
db.SaveChanges();
// do save with Ado.Net
}
/* if you want to check the same password is being entered by user as in database to confirm password/recovery*/
public static bool IsValidPassword(string EnteredPassword)
{
var salt= /* fetch salt from database*/;
var PasswordInDb= /* fetch Password from database*/;
var crypto = new SimpleCrypto.PBKDF2();
string originalPassword = crypto.Compute(PasswordInDb,Salt);
return crypto.Compare(originalPassword,EnteredPassword); // it will return true/false;
}