A developer builds a login system.
They store passwords.
But instead of encryption, they use hashing.
Months later, the database is leaked.
But attackers cannot directly read passwords.
Why?
Because hashes cannot be reversed.
What is Hashing?
Hashing converts data into a fixed-length string that cannot be reversed.
What is Encryption?
Encryption transforms data into a reversible format using a key.
Key Difference
| Feature | Hashing | Encryption |
|---|---|---|
| Reversible | No | Yes |
| Purpose | Integrity | Confidentiality |
| Example | Password storage | Secure communication |
Real-World Example
- Passwords → hashed
- Messages → encrypted
Why This Matters
If developers confuse hashing and encryption:
- Sensitive data may be exposed
- Security systems fail
Best Practice
- Use hashing for passwords (bcrypt, SHA-256)
- Use encryption for data transmission
