Secure password storage

[elite_prodigy]

What would be the most secure way to store a password.

 

I know of md5(), but is there something better, or a more efficient way/method of using it?

 

A basic example would be very helpful, as well.

 

 

[trq]

A salted md5 should suffice. Google for examples.

[dawsba]

  $add = $username;
  md5($add.md5($password.$add));

[jzdexta]

$password = md5($userName).":".md5($userPassword);

 

This makes both username and password case sensitive

[rhodesa]

i tend to see people use md5() for one way encryption...is there a reason people use that directly versus just using crypt() and letting PHP pick the best encryption method?

[dawsba]

i'd guess that i use md5 for end user security if for whatever reason my backup data is stolen/lost or otherwise usurped users passwords are not cracked as easily as to be done by decrpt.

 

Thats my own view on it anyhows.

[rhodesa]

i'd guess that i use md5 for end user security if for whatever reason my backup data is stolen/lost or otherwise usurped users passwords are not cracked as easily as to be done by decrpt.

 

Thats my own view on it anyhows.

 

what do you mean "by decrpt"?

[dawsba]

ignore me I had base64_encode in my head.

[waynew]

$password = $_POST['password'];
$salt = "lol_3dfthis_is_arfrf(!_salt_so_r&!andom_ololololol";
$password = sha1($salt.$password.$salt);