In the latest update to my web application, I focused on two significant improvements: integrating ASP.NET Identity for user authentication and replacing its default password-hashing algorithm with Argon2, a highly secure and modern hashing mechanism. These updates are part of my ongoing efforts to enhance both security and user management within the application.
ASP.NET Identity Integration: I’ve fully customized the identity pages to align with the Metronic 8.2.7 UI. This update enhances the user experience and lays the groundwork for future features, including custom user fields, social logins, and advanced role-based authorization.
Argon2 for Password Hashing: To strengthen security, I replaced the default password-hashing mechanism with Argon2. Known for its resistance to brute-force and parallel attacks, Argon2 provides the best-in-class protection for user credentials.
During deployment, I configured Argon2 with the following initial parameters:
These parameters are intentionally conservative for the initial deployment and will be fine-tuned after conducting benchmark tests on the Azure Web App Service to balance security and performance.
Future Plans: I plan to build on these improvements with several exciting updates:
Screenshots have been provided to highlight the changes and updates to the application.