How to re-hash Laravel passwords? -


i'm making forget password feature in web app, problem store user's password using:

hash::make('_their_password_')

is there way re-hash or recommended approach this?

the point of hashing password it's (supposed be) irreversible operation. if database compromised, attacker gain access hashes, not passwords. way attacker can't log in users' passwords on other sites.

make "we'll reset password" feature instead of "we'll send password" feature.

note there other best practices absolutely should following regarding password hashing, make sure "supposed be" above holds, , further minimize impact if site compromised. laravel's hash class seems using password-appropriate hash function bcrypt. however, make sure you're using salt when you're hashing password.


Comments

Popular posts from this blog

java.util.scanner - How to read and add only numbers to array from a text file -

rewrite - Trouble with Wordpress multiple custom querystrings -