Modern php hashing algorithm

Question

I'm developing a new system and I wondered if my oldschool phpass is still the best option for hashing in php?

I'm looking for the best security, and I heard that blowfish is outdated. DES is old.

So what will you guys recommend for a new php system? I need something that is future-proof as replacing the algorithm after the release is a pain.

Thanks in advance.

Modern PHP uses the built-in password_hash()/password_verify() functions; when it doesn't even matter if the algorithm is changed by future versions of PHP — Mark Baker
– Mark Baker, Commented Aug 28, 2015 at 13:48
@MarkBaker beat me to it for the second time today. This has to stop :p — user4925382
– user4925382, Commented Aug 28, 2015 at 13:58

Community · Accepted Answer · 2017-05-23 10:29:14Z

3

PHP 5.5 has a built in password_hash() and password_verify() function and it is very powerful.

Make sure your php version is 5.5 or above before you try to implement it.

CommunityBot

11 silver badge

answered Aug 28, 2015 at 13:56

user4925382

Sign up to request clarification or add additional context in comments.

2 Comments

But note that you can use the userland implementation from PHP >= 5.3.7

Okay. tried that password_hash function and it seems to work great. now trying to verify it. Thank you!

Alex Kobzin · Accepted Answer · 2015-08-28 13:53:46Z

-1

You can look at Mhash php extention, mhash() and SHA-512 as algorythm

answered Aug 28, 2015 at 13:53

Alex Kobzin

694 bronze badges

From that manual page: "Note: This extension is obsoleted by Hash." That's not exactly modern.