Can I use a user’s password hash as the AES key to make a one time token?
I want to make a one time token that users use to reset their password. The token should be invalidated once it is used, is it safe to use their currently hashed password as the aes key to encrypt the token so that once the p… Continue reading Can I use a user’s password hash as the AES key to make a one time token?