How Safe Is Admin Passwords?
Posted: Sat Jun 20, 2015 1:34 pm
I would like to know How safe is the opencart 2.0 password using sha1 and salt?
Or should I be using password_hash()
Or should I be using password_hash()
If you have the ability use password_hash(). I do. It's specifically designed to deal with current password breaking techniques. And as part of the PHP core it will receive automatic updates as more secure hashing methods are developed.
The only good news with OpenCart's method is that it's not in popular password cracking software yet. That won't last forever, though.