PHPackages                             virgil/purekit - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Security](/categories/security)
4. /
5. virgil/purekit

ActiveLibrary[Security](/categories/security)

virgil/purekit
==============

Virgil Security introduces an implementation of the Password-Hardened Encryption (PHE) protocol that provides developers with a technology to protect users passwords from offline/online attacks and make stolen passwords useless even if your database has been compromised.

v4.0.0(1y ago)63035[2 issues](https://github.com/VirgilSecurity/virgil-purekit-php/issues)[2 PRs](https://github.com/VirgilSecurity/virgil-purekit-php/pulls)BSD-3-ClausePHPPHP ^8.3CI failing

Since Jan 11Pushed 3mo ago6 watchersCompare

[ Source](https://github.com/VirgilSecurity/virgil-purekit-php)[ Packagist](https://packagist.org/packages/virgil/purekit)[ Docs](https://passw0rd.io/)[ RSS](/packages/virgil-purekit/feed)WikiDiscussions master Synced 2w ago

READMEChangelog (10)Dependencies (6)Versions (18)Used By (0)

Virgil PureKit PHP
==================

[](#virgil-purekit-php)

[![Build Status](https://github.com/VirgilSecurity/virgil-purekit-php/actions/workflows/build.yml/badge.svg?branch=master)](https://travis-ci.com/VirgilSecurity/virgil-purekit-php)[![GitHub license](https://camo.githubusercontent.com/0baecd984aa7fcf0f699960bfd1e3e345ca00164672d9771025a55f2e306cd71/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f6c6963656e73652d425344253230332d2d436c617573652d626c75652e737667)](https://github.com/VirgilSecurity/virgil/blob/master/LICENSE)[![Latest Version on Packagist](https://camo.githubusercontent.com/6e9d05d78e12a8928f79f0635e540ad8dc0775d3f24111e383f64f9e29cbd7f8/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f762f76697267696c2f707572656b69742e7376673f7374796c653d666c61742d737175617265)](https://packagist.org/packages/virgil/purekit)[![Total Downloads](https://camo.githubusercontent.com/465848c036f10bc77a46244d9eceb96e159fbbf72d34f77ed1ac94212afc5131/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f64742f76697267696c2f707572656b69742e7376673f7374796c653d666c61742d737175617265)](https://packagist.org/packages/virgil/purekit)[![API Reference](https://camo.githubusercontent.com/75a5dde484f41e506b1c10d566ba9841dcb5d1426f1989cfb169da12c416565a/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4150492532307265666572656e63652d707572656b69742d2d7068702d677265656e)](https://virgilsecurity.github.io/virgil-purekit-php/)

[Introduction](#introduction) | [Benefits](#benefits) | [Features](#features) | [Installation](#installation) | [Resources](#resources) | [License](#license) | [Support](#support)

Introduction
------------

[](#introduction)

[![](https://camo.githubusercontent.com/aea8e9f3a433198439ee5deef949deccb96d45969296c4a0d293d6fa79179d7f/68747470733a2f2f63646e2e76697267696c73656375726974792e636f6d2f6173736574732f696d616765732f6769746875622f6c6f676f732f707572656b69742f507572654b69742e706e67)](https://camo.githubusercontent.com/aea8e9f3a433198439ee5deef949deccb96d45969296c4a0d293d6fa79179d7f/68747470733a2f2f63646e2e76697267696c73656375726974792e636f6d2f6173736574732f696d616765732f6769746875622f6c6f676f732f707572656b69742f507572654b69742e706e67)

[Virgil Security](https://virgilsecurity.com) introduces [Virgil PureKit](https://virgilsecurity.com/purekit/) - an open-source security framework for enabling post-compromise protection for stored data. PureKit allows developers to protect users' passwords and personal data from hacking and securely share data.

The framework can be used within any database or login system that uses a password, so it’s applicable for a company of any industry or size.

### Password-Based Security

[](#password-based-security)

Virgil PureKit is based on the [Password-Hardened Encryption (PHE) protocol](https://virgilsecurity.com/wp-content/uploads/2018/11/PHE-Whitepaper-2018.pdf) – a powerful and revolutionary cryptographic technology that provides stronger and more modern security, that protects users' data and reduces the security risks associated with weak passwords.

PureKit brings data security to a new level in three ways:

1. **Replaces password hashing** in a way making it impossible to run offline and online attacks. By interacting with PHE Service, a standalone cryptographic service in Virgil Cloud dedicated to implement PHE protocol, PureKit creates a unique user’s record that is associated with the user password. It is important to note that a user password is never transmitted to the PHE service in any form.
2. **Encrypts data with user’s personal encryption keys**. PureKit gives users a possibility to encrypt their data with personal encryption keys, and all keys can be revealed only after providing a correct password.
3. **Immediately invalidate stolen database**. Even if your database has been compromised it impossible to run offline attacks, to retrieve user password or decrypt data. At the same time, PureKit provides convenient and secure key rotation procedure, that allows you quickly update all your server keys without losing access to your data.

Features
--------

[](#features)

- Per-user data and files encryption
- Password protection against hacking
- Management of data encryption keys
- Secure data and files sharing
- Role-based data encryption

Benefits
--------

[](#benefits)

- Users control data access
- Post-compromise security
- Password &amp; data protection from online and offline attacks
- Replaces salting and hashing of passwords
- Zero knowledge of user passwords and secret keys
- Virgil Security has no access to your data
- Encryption occurs independently of database security
- Works with any database
- Stronger than encryption at-rest and TDE
- More secure than AWS and Google Key Management Systems (KMS)
- Instant invalidation of stolen databases
- Compliance with GDPR, HIPAA, PCI DSS and more

Installation
------------

[](#installation)

Navigate to our [Developer Documentation](https://developer.virgilsecurity.com/docs/purekit) to install and start working with Virgil PureKit.

Resources
---------

[](#resources)

- [PureKit Product Page](https://virgilsecurity.com/purekit/)
- [PureKit Documentation](https://developer.virgilsecurity.com/docs/purekit/) - start integrating PureKit into your project with our detailed guides.
- [PureKit API Reference](https://virgilsecurity.github.io/virgil-purekit-php/)
- [MariaDB Demo](https://github.com/VirgilSecurity/virgil-mariadb-demo) - a simple web application that illustrates how Virgil PureKit can be used with MariaDB to store and share data in the most secure way.
- [Virgil PHE WhitePaper](https://virgilsecurity.com/wp-content/uploads/2018/11/PHE-Whitepaper-2018.pdf) - foundation principles of the Password-Hardened Encryption (PHE) protocol.

License
-------

[](#license)

This library is released under the [3-clause BSD License](LICENSE).

Support
-------

[](#support)

Our developer support team is here to help you. Find out more information at our [Help Center](https://help.virgilsecurity.com/).

You can find us on [Twitter](https://twitter.com/VirgilSecurity) or send an email to our support team .

Also, get extra help from our support team on [Slack](https://virgilsecurity.com/join-community).

###  Health Score

48

—

FairBetter than 94% of packages

Maintenance54

Moderate activity, may be stable

Popularity23

Limited adoption so far

Community19

Small or concentrated contributor base

Maturity84

Battle-tested with a long release history

 Bus Factor1

Top contributor holds 82.8% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~174 days

Recently: every ~479 days

Total

13

Last Release

637d ago

Major Versions

v1.3.1 → v2.0.02019-03-07

v2.2.0 → v3.0.02020-04-07

v3.2.0 → v4.0.02024-10-01

PHP version history (5 changes)v1.0.0PHP &gt;=7.1

v2.0.0PHP ^7.2

v3.1.0PHP ^7.3|^8.0

v3.2.0PHP ^8.2

v4.0.0PHP ^8.3

### Community

Maintainers

![](https://www.gravatar.com/avatar/dbf68f51108fed58c83419750ce2961ab0e9a82577dde77fd387c5b5a0c60e69?d=identicon)[virgil](/maintainers/virgil)

---

Top Contributors

[![PetrenkoAnton](https://avatars.githubusercontent.com/u/24354013?v=4)](https://github.com/PetrenkoAnton "PetrenkoAnton (197 commits)")[![SergeySeroshtan](https://avatars.githubusercontent.com/u/2228157?v=4)](https://github.com/SergeySeroshtan "SergeySeroshtan (29 commits)")[![MariiaMalitska](https://avatars.githubusercontent.com/u/37335222?v=4)](https://github.com/MariiaMalitska "MariiaMalitska (6 commits)")[![cardoso](https://avatars.githubusercontent.com/u/5606812?v=4)](https://github.com/cardoso "cardoso (2 commits)")[![Sammie109](https://avatars.githubusercontent.com/u/52605746?v=4)](https://github.com/Sammie109 "Sammie109 (2 commits)")[![KeithLabelle](https://avatars.githubusercontent.com/u/50512888?v=4)](https://github.com/KeithLabelle "KeithLabelle (1 commits)")[![SanjoDeundiak](https://avatars.githubusercontent.com/u/6513916?v=4)](https://github.com/SanjoDeundiak "SanjoDeundiak (1 commits)")

---

Tags

cryptographyencryptiongdprhipaapassw0rdpasswordpassword-hardened-encryptionphepiipiidatasdk

###  Code Quality

TestsPHPUnit

### Embed Badge

![Health badge](/badges/virgil-purekit/health.svg)

```
[![Health](https://phpackages.com/badges/virgil-purekit/health.svg)](https://phpackages.com/packages/virgil-purekit)
```

###  Alternatives

[laravel/framework

The Laravel Framework.

34.8k532.1M19.4k](/packages/laravel-framework)[tempest/framework

The PHP framework that gets out of your way.

2.2k31.1k12](/packages/tempest-framework)[netflie/whatsapp-cloud-api

The first PHP SDK to send and receive messages using a cloud-hosted version of the WhatsApp Business Platform

666500.1k5](/packages/netflie-whatsapp-cloud-api)[neuron-core/neuron-ai

The PHP Agentic Framework.

2.0k496.1k33](/packages/neuron-core-neuron-ai)[tencentcloud/tencentcloud-sdk-php

TencentCloudApi php sdk

3661.2M46](/packages/tencentcloud-tencentcloud-sdk-php)[jasara/php-amzn-selling-partner-api

A fluent interface for Amazon's Selling Partner API in PHP

1348.1k1](/packages/jasara-php-amzn-selling-partner-api)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)
