note 119525 added to faq.passwords

A great read.. https://nakedsecurity.sophos.com/2013/11/20/serious-security-how-to-store-your-users-passwords-safely/ Serious Security: How to store your users’ passwords safely In summary, here is our minimum recommendation for safe storage of your users’ passwords: Use a strong random number generator to create a salt of 16 bytes or longer. Feed the salt and the password into the PBKDF2 algorithm. Use HMAC-SHA-256 as the core hash inside PBKDF2. Perform 20,000 iterations or more. (June 2016.) Take 32 bytes (256 bits) of output from PBKDF2 as the final password hash. Store the iteration count, the salt and the final hash in your password database. Increase your iteration count regularly to keep up with faster cracking tools. Whatever you do, don’t try to knit your own password storage algorithm. ---- Server IP: 72.52.91.14 Probable Submitter: 156.205.127.44 ---- Manual Page -- http://php.net/manual/en/faq.passwords.php Edit -- https://master.php.net/note/edit/119525 Del: integrated -- https://master.php.net/note/delete/119525/integrated Del: useless -- https://master.php.net/note/delete/119525/useless Del: bad code -- https://master.php.net/note/delete/119525/bad+code Del: spam -- https://master.php.net/note/delete/119525/spam Del: non-english -- https://master.php.net/note/delete/119525/non-english Del: in docs -- https://master.php.net/note/delete/119525/in+docs Del: other reasons-- https://master.php.net/note/delete/119525 Reject -- https://master.php.net/note/reject/119525 Search -- https://master.php.net/manage/user-notes.php