Re: [Discussion] Changing PASSWORD_DEFAULT to Argon2
| From: | Tim Düsterhus | Date: | Fri, 25 Sep 2026 07:51:58 +0000 |
| Subject: | Re: [Discussion] Changing PASSWORD_DEFAULT to Argon2 | ||
| References: | 1 2 3 4 5 6 7 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-132630@lists.php.net to get a copy of this message | ||
Hi
On 2026-09-25 08:59, Sjoerd Langkemper wrote:
Is it a possibility to set argon2 as default when PHP is compiled with OpenSSL, and bcrypt otherwise?Randomly changing defaults based on the build environment provide for a terrible user experience. In particular this would also mean that for “rolling upgrades” of your PHP version or other mixed environments some of your application servers might be unable to verify hashes created by other application servers. Best regards Tim Düsterhus