Tag: passwords
password_hash() — Native Bcrypt (PHP 5.5)
PHP 5.5+
PHP 5.5 added password_hash() and password_verify() — the only correct way to hash and verify passwords. Never use MD5, SHA1, or unsalted hashes.
6mo ago
PHP beginner
Password Peppering
PHP 5.5+
A secret server-side value mixed into passwords before hashing — database theft alone is insufficient; the pepper must also be compromised.
OWASP A2:2021
6mo ago
Security intermediate
password_hash()
PHP 5.5+
4
PHP's built-in function for securely hashing passwords using bcrypt or Argon2 with automatic salting.
6mo ago
PHP beginner
password_verify()
PHP 5.5+
4
Checks a plaintext password against a bcrypt/Argon2 hash produced by password_hash() — the correct way to validate passwords.
6mo ago
PHP beginner