Yep. I think current PHP best practice is to use standard library password_hash() and password_verify() which takes care of salting: https://www.php.net/manual

Yep. I think current PHP best practice is to use standard library password_hash() and password_verify() which takes care of salting: https://www.php.net/manual/en/function.password-hash.php https://www.php.net/manual/en/function.password-hash.php