PHPackages elnur/blowfish-password-encoder-bundle - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [Security](/categories/security) 4. / 5. elnur/blowfish-password-encoder-bundle ActiveSymfony-bundle[Security](/categories/security) elnur/blowfish-password-encoder-bundle ====================================== Blowfish (bcrypt) based password encoder for Symfony2 0.5.0(12y ago)61129.6k7MITPHPPHP >=5.3.2 Since Apr 15Pushed 12y ago1 watchersCompare [ Source](https://github.com/elnur/ElnurBlowfishPasswordEncoderBundle)[ Packagist](https://packagist.org/packages/elnur/blowfish-password-encoder-bundle)[ RSS](/packages/elnur-blowfish-password-encoder-bundle/feed)WikiDiscussions master Synced 1mo ago READMEChangelogDependencies (4)Versions (4)Used By (0) ElnurBlowfishPasswordEncoderBundle ================================== [](#elnurblowfishpasswordencoderbundle) [![Build Status](https://camo.githubusercontent.com/5b1f8948afbf6a86a032a2b9651cfa323972fb3053022faf60401784a812b4eb/68747470733a2f2f7365637572652e7472617669732d63692e6f72672f656c6e75722f456c6e7572426c6f776669736850617373776f7264456e636f64657242756e646c652e706e67)](http://travis-ci.org/elnur/ElnurBlowfishPasswordEncoderBundle) Still using `MD5` or `SHA` family hashing algorithms for password “encryption”? If you are, read [this](http://codahale.com/how-to-safely-store-a-password) and [that](http://yorickpeterse.com/articles/use-bcrypt-fool) and then come back to get yourself a copy of this bundle. > The [BCrypt password encoder](http://symfony.com/doc/current/reference/configuration/security.html#using-the-bcrypt-password-encoder) has been added to the Symfony core in 2.2 and has been improved to the level of this bundle and beyond in 2.3. So, if you're using Symfony 2.3+, consider using the encoder from the core instead of this bundle. Installation ------------ [](#installation) 1. Add this to the `composer.json`: ``` { "require": { "elnur/blowfish-password-encoder-bundle": "~0.5" } } ``` And run: ``` php composer.phar update elnur/blowfish-password-encoder-bundle ``` 2. Enable the bundle in `app/AppKernel.php`: ``` public function registerBundles() { $bundles = array( // ... new Elnur\BlowfishPasswordEncoderBundle\ElnurBlowfishPasswordEncoderBundle(), ); } ``` 3. And, finally, set the encoder in `app/config/security.yml`: ``` security: encoders: Symfony\Component\Security\Core\User\User: id: security.encoder.blowfish ``` Configuration ------------- [](#configuration) By default the encoder uses a cost factor of `15`, which is pretty reasonable, but you can change it to a different value in the range of `4-31` by editing the `config.yml` file: ``` elnur_blowfish_password_encoder: cost: 10 ``` Each increment of the cost *doubles* the time it takes to encode a password. You can change the cost factor at *any time* — even if you already have some passwords encoded using a different cost factor. New passwords will be encoded using the new cost factor, while the already encoded ones will be validated using a cost factor that was used back when they were encoded. Usage ----- [](#usage) A salt for each new password is generated automatically and need not be persisted. Since an encoded password contains the salt used to encode it, persisting the encoded password alone is enough. All the encoded passwords are `60` characters long, so make sure to allocate enough space for them to be persisted. License ------- [](#license) This bundle is under the MIT license. See the complete license in the bundle: ``` Resources/meta/LICENSE ``` Acknowledgements ---------------- [](#acknowledgements) I thank [asm89](https://github.com/asm89) for enlightening me by giving the links you see above and answering my other related questions on the `#symfony`channel. And I thank [dustin10](https://github.com/dustin10) for suggesting to add the extension class to make the bundle easier to install and configure. ### Health Score 34 — LowBetter than 77% of packages Maintenance20 Infrequent updates — may be unmaintained Popularity38 Limited adoption so far Community14 Small or concentrated contributor base Maturity50 Maturing project, gaining track record Bus Factor1 Top contributor holds 89.5% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Every ~278 days Total 3 Last Release 4590d ago ### Community Maintainers ![](https://www.gravatar.com/avatar/f266c78051a6fe423eec62c11621d5e85344cf371a69554765f8d04ee884fb59?d=identicon)[elnur](/maintainers/elnur) --- Top Contributors [![elnur](https://avatars.githubusercontent.com/u/821060?v=4)](https://github.com/elnur "elnur (17 commits)")[![carbocation](https://avatars.githubusercontent.com/u/218804?v=4)](https://github.com/carbocation "carbocation (1 commits)")[![shieldo](https://avatars.githubusercontent.com/u/97280?v=4)](https://github.com/shieldo "shieldo (1 commits)") --- Tags securityblowfishbcryptpassword-encoder ### Code Quality TestsPHPUnit ### Embed Badge ![Health badge](/badges/elnur-blowfish-password-encoder-bundle/health.svg) ``` [![Health](https://phpackages.com/badges/elnur-blowfish-password-encoder-bundle/health.svg)](https://phpackages.com/packages/elnur-blowfish-password-encoder-bundle) ``` ### Alternatives [phpseclib/phpseclib PHP Secure Communications Library - Pure-PHP implementations of RSA, AES, SSH2, SFTP, X.509 etc. 5.6k434.8M1.3k](/packages/phpseclib-phpseclib)[bordoni/phpass Portable PHP password hashing framework 244.4M26](/packages/bordoni-phpass)[vipx/bot-detect-bundle Symfony VipxBotDetectBundle 14229.6k1](/packages/vipx-bot-detect-bundle)[usu/scrypt-password-encoder-bundle Scrypt password encoder for Symfony2 191.3k](/packages/usu-scrypt-password-encoder-bundle) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)