mardi 16 février 2016

Does bcrypt + str_random generate a secure password?

I am creating random passwords for first time users of my application.

Is $password = bcrypt(str_random(12)); a cryptographically secure way to generate a password in Laravel 5.1?

I can see from this answer: Laravel str_random() or custom function? that str_random() is not sufficient. Does wrapping it in bcrypt() help?

Also, are there universal or generally accepted standards for password generation security?



via Chebli Mohamed

Aucun commentaire:

Enregistrer un commentaire