Tag: passwords
password_hash() — Native Bcrypt (PHP 5.5)
PHP 5.5+
PHP 5.5 added password_hash() and password_verify() — the only correct way to hash and verify passwords. Never use MD5, SHA1, or unsalted hashes.
6mo ago
PHP beginner
Weak Password Hash
PHP 5.5+
1
Using MD5, SHA-1, or SHA-256 to hash passwords — fast algorithms designed for data integrity, not authentication, crackable in seconds with a GPU.
6mo ago
Security beginner
password_hash()
PHP 5.5+
4
PHP's built-in function for securely hashing passwords using bcrypt or Argon2 with automatic salting.
6mo ago
PHP beginner
password_verify()
PHP 5.5+
4
Checks a plaintext password against a bcrypt/Argon2 hash produced by password_hash() — the correct way to validate passwords.
6mo ago
PHP beginner
Salted Hashing
PHP 5.5+
1
Prepending or appending a unique random value (salt) to each password before hashing, neutralising precomputed rainbow table attacks.
CWE-759 OWASP A2:2021
6mo ago
Security beginner