How to re-hash Laravel passwords? -
i'm making forget password feature in web app, problem store user's password using:
hash::make('_their_password_')
is there way re-hash or recommended approach this?
the point of hashing password it's (supposed be) irreversible operation. if database compromised, attacker gain access hashes, not passwords. way attacker can't log in users' passwords on other sites.
make "we'll reset password" feature instead of "we'll send password" feature.
note there other best practices absolutely should following regarding password hashing, make sure "supposed be" above holds, , further minimize impact if site compromised. laravel's hash
class seems using password-appropriate hash function bcrypt. however, make sure you're using salt when you're hashing password.
Comments
Post a Comment