Part of the PHP ecosystem · 7 projects
This module enhances Drupal's password security by replacing the default hashing algorithm with a more modern and secure method provided by PHP. It also includes forward compatibility for newer Drupal versions by implementing Argon2 as the default hashing algorithm.
Which version should I use?
3.x - The 3.x version provides a forward compatibility layer for sites running Drupal core > 10.1 and < 11.3. If you are running Drupal core 11.3 or greater, this module is not required. It forward ports the functionality of #3530186: Switch to argon2 as the default password hashing algorithm.
1.x, 2.x - The 1.x and 2.x versions replace Drupal's in PHP hashing algorithm with php's native password hashing. This functionality was added to Drupal core in 10.1.0. The module is based on work from the core issue queue #1845004: Replace custom password hashing library with PHP password_hash(). If you are running Drupal core 10.1 or greater, the 1.x and 2.x versions are not required.
Installation
The php_password module will take care of replacing the relevant password services provided by Drupal core.
Installation is as simple as installing any other Drupal module.
Configuration (3.x)
This module doesn't have a lot of configuration needed out of the box. However
you should as a minimum create a services.yml file to configure the password algorithm to use. You may also wish to tweak some of the parameters used to hash new passwords. See The README for more information.
Ask your assistant about PHP Password
Check compatibility with your Drupal and PHP version, maintenance and security coverage, from current release data. How it works
Depends on
Dependencies of the latest stable release
No dependencies recorded for this project.
Required by
Tracked projects that depend on this one
No tracked projects depend on this one yet.
More in the PHP ecosystem
Most installed first