How can I use bcrypt or scrypt with PHP? Is there a default built in function that uses either of these two?

Question

Is there a default built in function in PHP that allows for use of scrypt or bcrypt?

score 1 · Answer 1 · answered Jun 16 '14 at 14:48

1

PHP Crypt function uses bcrypt.

If you're using PHP 5.5.0 or greater then you can use Password Hash with crypt.

answered Jun 16 '14 at 14:48

Styphon

@user51819 I've added that, but most people still use < PHP v 5.5.0, so I added `crypt` first. – Styphon Jun 16 '14 at 14:51
Since PHP 5.3.7 you can use the [compatibility pack](https://github.com/ircmaxell/password_compat/blob/master/lib/password.php). – martinstoeckli Jun 17 '14 at 06:48

score 1 · Accepted Answer · answered Jun 16 '14 at 14:49

1

For PHP 5.5.0 or above:

Read the relevant FAQ on PHP.net. More notably, you should check out this page on password hashing. Example:

echo password_hash("rasmuslerdorf", PASSWORD_BCRYPT, array('cost' => 12));

For earlier versions, look at the password_compat library by ircmaxwell.

answered Jun 16 '14 at 14:49

Wayne Whitty

password_hash will handle that bit for you. – Wayne Whitty Jun 16 '14 at 15:04
@user51819 With BCRYPT, the salt is stored in the hash. BCRYPT is secure because it is extremely slow and can be made slower if needs be. – Wayne Whitty Jun 16 '14 at 15:07
PASSWORD_BCRYPT should be fine. – Wayne Whitty Jun 16 '14 at 15:12

2 Answers2