Password encyrption in PHP [duplicate] - php

Question

This question already has answers here:
Secure hash and salt for PHP passwords
(14 answers)
Closed 5 years ago.
What is the best way to encrypt a password in Php. Codeigniter's documentation says that password should be hashed using php's Password Hashing extension. Until now i have been encrypting password's using encryption key of codeigniter. Any suggestions.

Answer 1

Use this is for password Hashing
<?php
/**
* We just want to hash our password using the current DEFAULT algorithm.
* This is presently BCRYPT, and will produce a 60 character result.
*
* Beware that DEFAULT may change over time, so you would want to prepare
* By allowing your storage to expand past 60 characters (255 would be good)
*/
echo password_hash("rasmuslerdorf", PASSWORD_DEFAULT)."\n";
?>
Use this is for password Hashing Verify
<?php
// See the password_hash() example to see where this came from.
$hash = '$2y$07$BCryptRequires22Chrcte/VlQH0piJtjXl.0t1XkA8pw9dMXTpOq';
if (password_verify('rasmuslerdorf', $hash)) {
echo 'Password is valid!';
} else {
echo 'Invalid password.';
}
?>

Answer 2

You can also use md5() function for password encryption and Decryption.
Here is the example :
$password = '123456789';
$encrypted_password = md5($password);
echo "Encrypted Password :".$encrypted_password;
-------------------
Output :
Encrypted Password : 25f9e794323b453885f5181f1b624d0b
Now to check entered password is correct or not ( for example login ) get stored md5 password from the database and you can check it this way.
$entered_password = '123456789';
$encrypted_password = md5($entered_password);
if($encrypted_password == $password){
echo "Success";
}else{
echo "Fail";
}