当您确实需要在数据库中存储密码时，最佳做法是什么

I have a web service using HMAC to verify signed requests. In this scenario there is a key (password) assigned to each caller of my service. The user of course gets that key, but I also need to store the key in my database so that my service can verify the signature of each request coming in.I have a web service using HMAC to verify signe