PHPackages                             jord-jd/php-password-cracker - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Security](/categories/security)
4. /
5. jord-jd/php-password-cracker

ActiveLibrary[Security](/categories/security)

jord-jd/php-password-cracker
============================

PHP package to crack passwords

v3.1.0(1mo ago)61522LGPL-3.0-onlyPHPPHP >=7.1CI passing

Since Feb 18Pushed 1mo agoCompare

[ Source](https://github.com/Jord-JD/php-password-cracker)[ Packagist](https://packagist.org/packages/jord-jd/php-password-cracker)[ GitHub Sponsors](https://github.com/DivineOmega)[ RSS](/packages/jord-jd-php-password-cracker/feed)WikiDiscussions master Synced 1w ago

READMEChangelog (5)Dependencies (3)Versions (6)Used By (2)

PHP Password Cracker
====================

[](#php-password-cracker)

[![Tests](https://github.com/Jord-JD/php-password-cracker/actions/workflows/tests.yml/badge.svg)](https://github.com/Jord-JD/php-password-cracker/actions/workflows/tests.yml)[![Packagist](https://camo.githubusercontent.com/1f6c5dd8531dae207b85ab48414e29e8ded468887f2c232e4a89ad7b8a679343/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f762f6a6f72642d6a642f7068702d70617373776f72642d637261636b65722e737667)](https://packagist.org/packages/jord-jd/php-password-cracker)

PHP package to crack passwords

Only use this package to audit password hashes and dictionaries you are authorized to test.

Installation
------------

[](#installation)

```
composer require jord-jd/php-password-cracker
```

Usage
-----

[](#usage)

```
use JordJD\PasswordCracker\Crackers\DictionaryCracker;

$hash = password_hash('secret', PASSWORD_BCRYPT);

$password = (new DictionaryCracker())->crack($hash);

/*
$password = (new DictionaryCracker())->crack($hash, function($passwordBeingChecked) {
    echo 'Checking password '.$passwordBeingChecked.'...'.PHP_EOL;
});
*/

echo 'Password found: '.$password.PHP_EOL;
```

`crack()` returns the matching plain-text candidate, or `null` when no candidate matches or the hash format is unsupported. You can check a hash without running the dictionary using `DictionaryCracker::supportsHash($hash)`.

Custom dictionaries and concurrency
-----------------------------------

[](#custom-dictionaries-and-concurrency)

Pass an array, `Traversable`, or readable file path to use your own dictionary. The optional second argument controls the maximum number of concurrent checks.

```
$cracker = new DictionaryCracker(
    ['/known/password', 'another candidate', 'secret'],
    8
);

$password = $cracker->crack($hash);
```

```
$cracker = new DictionaryCracker('/secure/path/passwords.txt', 4);
```

Dictionary entries are used exactly as supplied, except that line endings are removed when a file is loaded. Unreadable files, non-string entries, and invalid concurrency produce clear exceptions.

Parallel support
----------------

[](#parallel-support)

When the `pcntl` and `posix` extensions are available, checks run in parallel through `spatie/async`. Other platforms use its synchronous fallback. The progress callback runs as candidates finish, so callback order is not guaranteed in parallel mode and processing may stop early after a match.

Compatibility
-------------

[](#compatibility)

PHP 7.1 through the current PHP 8.x releases are supported. Composer selects the newest compatible `spatie/async` release for the PHP runtime in use.

###  Health Score

47

—

FairBetter than 93% of packages

Maintenance94

Actively maintained with recent releases

Popularity15

Limited adoption so far

Community15

Small or concentrated contributor base

Maturity56

Maturing project, gaining track record

 Bus Factor1

Top contributor holds 88.9% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~585 days

Total

5

Last Release

31d ago

Major Versions

v1.1.0 → v2.0.02026-02-14

v2.0.0 → v3.0.02026-02-14

### Community

Maintainers

![](https://www.gravatar.com/avatar/c580cdf7c14898fff179cdfc1085892091d5d2f49d917873a12365af9ac77c93?d=identicon)[Jord-JD](/maintainers/Jord-JD)

---

Top Contributors

[![Jord-JD](https://avatars.githubusercontent.com/u/650645?v=4)](https://github.com/Jord-JD "Jord-JD (8 commits)")[![peter279k](https://avatars.githubusercontent.com/u/9021747?v=4)](https://github.com/peter279k "peter279k (1 commits)")

---

Tags

passwordpassword-crackerphpsecurity

###  Code Quality

TestsPHPUnit

### Embed Badge

![Health badge](/badges/jord-jd-php-password-cracker/health.svg)

```
[![Health](https://phpackages.com/badges/jord-jd-php-password-cracker/health.svg)](https://phpackages.com/packages/jord-jd-php-password-cracker)
```

###  Alternatives

[phpids/phpids

PHPIDS (PHP-Intrusion Detection System) is a simple to use, well structured, fast and state-of-the-art security layer for your PHP based web application

791150.0k2](/packages/phpids-phpids)[paragonie/ecc

PHP Elliptic Curve Cryptography library

25866.3k44](/packages/paragonie-ecc)[nicobleiler/php-passphrase

Passphrase generator with Laravel integration, inspired by Bitwarden. Uses the EFF long word list by default with support for custom wordlists.

4912.6k](/packages/nicobleiler-php-passphrase)[dwgebler/encryption

Encryption wrapper for PHP using libsodium — simple API for symmetric and asymmetric encryption, password hashing, digital signing, and message authentication.

317.5k](/packages/dwgebler-encryption)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)