title: validate password in code or stored procedure
body: <p>I am currently creating a login and registration system with .net/c#. A sql server database holds usernames and passwords (hashed passwords with a salt etc)</p>
  
  <p>When I need to validate the password, what is the current procedure. Is it to take the value the user has inputted hash it with the salt etc, pass it in to a stored procedure and do a comparison there? Or, same steps as above but do a compare of the passwords in C# code?</p>
  
  <p>I would like to make a decision based upon best practice and the most secure method so looking for suggestions on this and items I should consider.</p>