netidee projects: Opaque
With the Opaque software package, developers can set up the Opaque protocol with just a few lines of code. This enables password-based authentication without the server ever knowing the password.
Opaque is a solution for development teams of any web platform that offers accounts via username/email and password or account ID and API token authentication.
Password and API key authentication today rely on the password or API key being sent from a client to the server in its original form.
With the Opaque protocol, it is possible for a server to verify username and password without ever receiving the password in its original form. Consequently, a user password hash never needs to be stored in a database. Instead, an encrypted value is stored.
Opaque is a software package with which the Opaque protocol can be easily set up using just a few lines of Java script code to perform the password query and make it much more secure.
May 2024
More information