Password encryption in login

Question

I need to create a way to encrypt my password in my system login, because I haven’t implemented this security yet and I don’t have much idea how to do this.

So how could I create this encryption and compare it to login time and see if it’s right ? That is, create that hash to confuse the attacker (if I have a person using the While Shark to try to intercept my password) ?

What is the best form (base 64,MD5, RSA, among other forms) ?

Here is the code of mine controller what use to log in and compare login and password in the bank:

Autenticacaocontroller

 [HttpPost]
    public ActionResult Index(String Login, String Senha)
    {
        //verificando login pelo usuario do banco de dados ...
        Usuario login = db.Usuarios.Where(x => x.Login == Login && x.Senha == Senha).FirstOrDefault();
        if (login != null)
        {
            FormsAuthentication.SetAuthCookie(login.Nome.ToString(), false);
            Session.Add(".PermissionCookie", login.Perfil);
            Session.Add("UsuarioID", login.UsuarioID);
            return RedirectToAction("Index", "Home"); //pagina padrao para todos os usuarios...
        }
        return RedirectToAction("Index");
       
    }

Answer 1

Each of these algorithms has a different purpose, so to protect the password it is interesting to use them at different times.

For example, to protect the password from a man-in-the-Middle attack, it is important to use SSL, which basically uses RSA.

Now to store the password in the Database, it is interesting to use AES or SHA.

If you choose to use AES, you have the combination of the Rijndael algorithm with 256-bit blocks and keys.

Another option is to use a Hash algorithm, in this case give preference to SHA-2, SHA-3 or BLAKE2, in this case I would advise the use of BLAKE2.

In both cases it is interesting to use a Salt, I would advise a Random and Single Guid for each password.