Ask HN: Is the PHP 5.5 password_hash() function secure enough?

https://news.ycombinator.com/item?id=6238331
by alanbyrne • 13 years ago
5 0 13 years ago

Is the new PHP 5.5 password_hash function secure enough for production applications? (That is, if you follow the recommendations regarding cost and not generating your own salt)

Are the better alternatives out there for PHP?

If someone is using a different BCrypt alternative, should they implement this instead?

Related Stories

Loading related stories...

Source preview

news.ycombinator.com