title: Hashing Passwords With ASP.NET MVC 3
body: <p>I am right now in the process of trying to figure out the best way of hashing the password for my ASP.NET MVC 3 application.  From what I hear, it is good to use the given password and a random salt and then store the hashed password and salt together.  My question is won't that make the random salt pointless?  I mean the reason to hash a password is because if someone get into your database, they don't have the plain passwords and the salt make it much much harder to reverse the hash to get the password but but if I store the hash with the password, what is the point of the salt (my knowledge on hashing is every limited so I could be completely off base with my thinking).</p>
  
  <p>My second question is what hashing method is the best one to use?  I read that MD5 (which is what I have always used) is very simple to crack.  I hear the bcrypt/sha512 are pretty good.  Which one should use?  I know that C# by default comes with the sha512 hashing.  From what I can see, bcrypt is not included in the .NET library, are there any good libraries for C# and bcrypt?</p>