One of Symfony's * coolest * security features: 1) Users log in 2) Symfony checks their password hash. 3) Old algorithm? Rehash and save automatically π Automatic security upgrades over time! youtu.be/Bu8ZDbXAsq8
youtu.beSymfony Password Upgrading ExplainedSymfony can automatically upgrade old password hashes as users log in π
When a user successfully authenticates, Symfony checks whether their stored password hash uses an outdated algorithm. If it does, Symfony rehashes the submitted plain text password with the current hasher and saves the new hash.
No password reset needed. No user interruption. Just stronger hashes over time.
Check out the full course π https://symfonycasts.com/screencast/symfony8-security
1 repost1 like