RE: How to hash password correctly in PHP? 08-25-2017, 11:54 PM
#15
(08-25-2017, 10:00 PM)Jakub Wrote:(08-25-2017, 09:53 PM)Sikom Wrote:(08-25-2017, 09:51 PM)Jakub Wrote: Im hashing passwords on my websites/scripts using double md5 + salt and i personally prefer this way.
md5 is not really secure though is it?
i'm working with it for 1 year now and for now it's okay. But i have my own "hash" function so if double md5 with salt fails i will switch to my hash function
This beyond stupid.
MD5 was peer reviewed and looked over by tons of security experts, yet it was still broken.
Your own algorithm is probably not as advanced as MD5, and is a major security hole.
Use bcrypt or something ffs
PHP has a password_hash() function for a reason. Use it, the default algorithm is BCRYPT. @Sikom this goes to you aswell.
(This post was last modified: 08-26-2017, 12:00 AM by Blink.)