How should I hash passwords? Just use crypt? Use crypt with one of the other encryptions? Something else?

Reply

Well using crypt wouldnt "hash" anything i would encrypt it as i understand.

I would usually use MD5 to has a password, the only thing is once hashed you cant see the original password, this doesnt matter really though as to validate the password you store the hashed version in a DB and then hash the users input so that if correct the two hashes would match exactly. That way even if the site is compromised by a hacker and they get access to the DB they still cant see the passwords either!

Reply

I would use MD5 too, I forget the php function that can actually hash a password to md5, but yea, it's an easy way to do it; however, it's not hard to find a program that will crack the hash if a hacker find the hashed password so don't make the hash easy to find.

Reply

Check out the following code:



md5() returns a 32 character long string which is always unique and same for the supplied argument.

If you need more help the post

Reply