Search code examples
phpsaltowncloudphp-password-hash

Setting a salt for password_hash()

I'm creating a mass user import script in PHP for owncloud. I read the users from a CSV file, then I'll add them to the owncloud database. I'm having an issue with the passwords though. To my knowledge, owncloud uses password_hash() with BCRYPT. I have the passwordsalt, but I'm not sure how to use that salt with password_hash().

Any help there guys?

Solution

  • Use salt in the option array like this

    password_hash("rasmuslerdorf", PASSWORD_BCRYPT, array("cost" => 7, "salt" => "thisisyoursalt"));

    But using your own salt is not a good idea. Let password_hash() create a salt for your password. password_hash() will create different salt for every password. It will increase your password security strength.