@M4RZB4Ni said in Create Login Form (SqlServer 2014):
pass(show from db)
I just noticed this. if your DB knows what the password is it is a threat not only to your DB security but for each individual user. You can get sued for some real money! (the idea is that if your DB gets hacked and password table stolen the attackers will have both username and password in plain text and, if passwords are recycled by your users, they will try them on paypall or amazon and steal money off them).
Use a hash and salt algorithm (SHA3 512 recommended).
An "entertaining" explanation can be found here: https://www.youtube.com/watch?v=8ZtInClXe1Q