go from unsafe password for secure password

Question

I'm new in the asp.net and I want to hear about who knows something about making passwords secure.

Here's how I'm currently doing it but I'm wondering if there's a more secure way?

protected void ButtonOpdaterPassword_Click(object sender, EventArgs e)
{

    string id = Session["id"].ToString();

    string password = TextBoxPassword.Text;


    SqlConnection conn = new SqlConnection(ConfigurationManager.ConnectionStrings["ConnectionString"].ToString());
    SqlCommand cmd = new SqlCommand();
    cmd.Connection = conn;


    cmd.CommandText = "UPDATE users SET password = @password WHERE Id = @id;";
    cmd.Parameters.AddWithValue("@Id", id);
    cmd.Parameters.AddWithValue("@password", password);


    conn.Open();
    cmd.ExecuteNonQuery();
    conn.Close();

    Response.Redirect("/admin-panel-2/Default.aspx");
}

Answer 1

You can use the following library: http://efxa.org/2014/02/28/the-project-hasher-decent-implementation-of-salted-hashing/

It is a personal implementation and is open source.