[Sikom]

Hey, I am working on an authentication system, and therefor I find the need to hash the passwords like one should do.

So what I am wondering, how would one go about hashing a password in PHP. I guess there are multiple methods. The tutorial I am using is currently using

Code:

password_hash($password, PASSWORD_DEFAULT);

Thanks ^.^

[Pikami]

In my opinion everyone should use BlowFish
In php you can get the hash by:

Code:

$hash = password_hash($passwod,CRYPT_BLOWFISH);

And you verify it with:

Code:

password_verify($password,$hash)

[Ecks]

Salt your hashes and check out https://www.youtube.com/user/Computerphile

[Sikom]

Salt your hashes and check out https://www.youtube.com/user/Computerphile

I am already subscribed to that channel, which videoes are you recommending that I watch? The ones from Tom Scott?

[Ecks]

Tom's https://www.youtube.com/watch?v=b4b8ktEV...ZVoctP2ehL is good, but I also recommend Dr. Mike's updates like https://www.youtube.com/watch?v=7U-RbOKanYs or https://www.youtube.com/watch?v=ciNHn38EyRc , Then again I recommend all of their videos for everyone lol.

[Sikom]

Tom's https://www.youtube.com/watch?v=b4b8ktEV...ZVoctP2ehL is good, but I also recommend Dr. Mike's updates like https://www.youtube.com/watch?v=7U-RbOKanYs or https://www.youtube.com/watch?v=ciNHn38EyRc , Then again I recommend all of their videos for everyone lol.

I am quite sure I have watched both of them

[Ecks]

This tut might be of worth looking as well, https://crackstation.net/hashing-security.htm

[Sikom]

This tut might be of worth looking as well, https://crackstation.net/hashing-security.htm

It was a nice tut, but I am still not 100% sure how I would do it in a good manner

[Jakub]

Im hashing passwords on my websites/scripts using double md5 + salt and i personally prefer this way.

[Sikom]

Im hashing passwords on my websites/scripts using double md5 + salt and i personally prefer this way.

md5 is not really secure though is it?