PHP Password
Categories
Component ID
Component name
Component type
Maintenance status
Development status
Component security advisory coverage
Downloads
Component created
Component changed
Component body
Replace Drupal's in PHP hashing algorithm with php's native password hashing.
Based on work from the core issue queue #1845004: Replace custom password hashing library with PHP 5.5 password_hash()
INSTALLATION
The php_password module will take care of replacing Drupal's password manager
for you so installation is as simple as installing any other Drupal module.
CONFIGURATION
This module doesn't have a lot of configuration needed out of the box. However
you may choose to tweak some of the parameters used to hash new passwords.
Hash Cost
Hash cost can be configured though a container parameter.
You can add the following snippet to your sites `services.yml` file to modify
the cost:
parameters:
password_hash_cost: 8
Additionally a Drush command is provided to help you calculate an ideal value
with between 100-500ms runtime on your specific hardware.
$ drush password-hash-cost
Hash algorithm
As of php 7.2 there are 2 password hashing mechanisms however php_password only
supports using PHP's default(bcrypt) hash algorithm at this time.
