⚠️ This project is no longer maintained. ⚠️

phpass - Laravel bundle

phpass is a portable public domain password hashing framework from the Openwall Project packaged as a bundle for the Laravel PHP Framework.

It uses the OpenBSD-style Blowfish-based bcrypt (CRYPT_BLOWFISH). Fallback includes BSDI-style extended DES-based hashes (CRYPT_EXT_DES) and MD5-based salted and variable iteration count password hashes implemented in phpass itself.

Installation

Use Artisan to install phpass:

php artisan bundle:install phpass

Enable it by adding the following to your bundles.php file:

return array(
  'phpass' => array('auto' => true),
)

You can also create an alias in application.php:

'phpass' => Hash\phpass

Usage

The syntax is consistent with Laravel's built-in Hash class (i.e., make and check). If you did not create an alias, use Hash\phpass:: instead of phpass::.

Create hash

/**
 *
 * @param   string		your password :)
 * @param   int			base-2 logarithm of the iteration count used for password stretching (default is 8);
 * @param   boolean		use portable hashes (default is FALSE);
 *
 */

$password = 'your extremely secure password';
$hashedPassword = phpass::make($password);

Check hash

$hashedPassword = '$2a$08$aZtg0P47YOrdAh/fPARzDuBaAJMhu4ueeri8Hxh6OOAjI80HXVwHu';
$password = 'your extremely weak password';
echo (phpass::check($password, $hashedPassword)) ? 'Correct!' : 'Wrong!';

Miscellaneous

Visit the Openwall Project for more information on this class and password security in general.