Max Length Of Password_Hash

[rahi (Mohammad Rahi)]

Hi

What is the max length of password_hash field?

In database, It set to varchar(255) by default and save password in 60 characters.

[evstevemd (Stefano Mtangoo)]

It depends on hashing scheme that you use!

[evstevemd (Stefano Mtangoo)]

• MD5 generates a 128-bit hash value. You can use CHAR(32) or BINARY(16)
• SHA-1 generates a 160-bit hash value. You can use CHAR(40) or BINARY(20)
• SHA-224 generates a 224-bit hash value. You can use CHAR(56) or BINARY(28)
• SHA-256 generates a 256-bit hash value. You can use CHAR(64) or BINARY(32)
• SHA-384 generates a 384-bit hash value. You can use CHAR(96) or BINARY(48)
• SHA-512 generates a 512-bit hash value. You can use CHAR(128) or BINARY(64)
• BCrypt generates an implementation-dependent 448-bit hash value. You might need CHAR(56), CHAR(60), CHAR(76), BINARY(56) or BINARY(60)

Copy and paste from SO

[CeBe]

When you use SecurityHelper:

http://stuff.cebe.cc/yii2docs/yii-helpers-basesecurity.html#generatePasswordHash()-detail

"The password hash string, ASCII and not longer than 64 characters."