Warning: You are browsing the documentation from version 4 to 10 of Pimcore. Please visit https://pimcore.com/docs/platform/ for the latest versions of Pimcore.
Version: Edit on GitHub

Configure Password Hashing Algorithm

Pimcore uses PHP's default password hashing algorithm by default, which currently equals to BCrypt with a cost of 10 (see PASSWORD_DEFAULT), but the algorithm can also be configured (see here for possible algorithms and their options), for example:

pimcore:
   security:
       password:
           algorithm: !php/const PASSWORD_BCRYPT
           options:
               cost: 13

This config will be used for Pimcore's backend users and fields of type Password in custom Pimcore Objects.