简体   繁体   中英

What password one-way hash should I use in PHP when bcrypt is unavailable?

I have to deploy a php app for a client, but his server doesn't support bcrypt. I have no way to change this. What should I use instead of bcrypt to hash the user's passwords?

bcrypt is ideal for password hashing because it is slow, in addition to other useful properties.

Using SHA256, or even SHA1 with an appropriate salted value should do the job quite well for most password-hashing-purposes.

--

See also: http://www.openwall.com/phpass/

The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM