Skip to main content
Version: 2024.1

Configure Password Hashing Algorithm

Pimcore uses PHP's default password hashing algorithm by default, which currently equals to BCrypt with a cost of 10 (see PASSWORD_DEFAULT), but the algorithm can also be configured (see here for possible algorithms and their options), for example:

pimcore:
security:
password:
algorithm: !php/const PASSWORD_BCRYPT
options:
cost: 13

This config will be used for Pimcore's backend users and fields of type Password in custom Pimcore Objects.