Is Sqlserver’s HASHBYTES() function cryptographically secure?

Question

The company I work today she has much of the programming done in the database through procedures and was seeing how the creation of the hash of passwords and their persistence in the bank. I discovered that the use of a very old function called PWDENCRYPT(). I’m willing to suggest a modification to this encryption and by researching, I discovered this HASHBYTES() which is a native function of SQL Server itself that does this as the algorithm of hash. I wonder if it is cryptographically secure and can be used in production.

Answer 1

Yeah, it’s safe if you use the right algorithm, if you use salt, etc., use an SHA2, do not use MD and avoid the previous SHA.

If you want to know more: How to hash passwords securely?.

Documentation.