CODEWITHSUNDEEP
phpphp-password-hash
HelloToYou
HelloToYou

Reputation: 345

How to get the random salt from password_hash in PHP?

I've read in the manual that the PHP-function password_hash() uses a random salt to hash the password. How to get this random salt for saving it to database?

Upvotes: 0

Views: 5372

Answers (2)

ceejayoz
ceejayoz

Reputation: 180075

A salt is generated automatically and randomly when you run password_hash. It will be different every time, even for the same password. That's good! From the docs:

enter image description here

You should not manually set or in any way modify the salt. Just save the entire hash in the database, and let PHP handle it. password_hash and password_verify, by default, use the industry standard bcrypt algorithm in a manner complying with industry best practices. Modifying that behavior is likely to make your site less secure.

Upvotes: 8

alve89
alve89

Reputation: 999

It's quite simple, look here: http://php.net/manual/en/faq.passwords.php#faq.password.storing-salts

But actually you shouldn't need it, because password_verify() doesn't need the salt manually.

Upvotes: 3

Related Questions