Home/ Questions/Q 8623335
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-12T07:15:24+00:00

TankAuth uses PHPass for password hashing with portable mode set to FALSE by default

  • 0

TankAuth uses PHPass for password hashing with portable mode set to FALSE by default that lets PHPass uses bcript instead since portable hashes does not store salt in its hash.

But, if we want to move the database to different server, we need to set it to TRUE even before adding records to table to avoid regenerating the passwords later. Evidently, keeping portable hashes TRUE makes the encrypted passwords is quite unsafe

Is there any better solution using tank auth to bcrypt the password hash yet painless database migration across servers?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    I think you will need to bite the bullet and turn on portable mode. It is unfortunate, but as stated in the question provided by @CyberJunkie, it’s necessary.

    Portable (PHPass) password hashes. Should I use them?

    • 0