What is the maximum password length I can use with PHP 5.5 password_hash()
and password_verify()
?
The function doesn't have any limit, you just have to keep your memory_limit in mind, that should be all.
Edit: You should limit the password length, otherwise it could slow down your server (depending on the algo)
see django: https://www.djangoproject.com/weblog/2013/sep/15/security/
Edit 2: to clarify: there shouldn't be a limit to 14-20 characters, it should be 4KB or more.