Code samples for this blog entry: http://www.phillipharrington.com/bcrypt-passwords-with-php-5-5/

Bcrypt Passwords with PHP 5.5

Bcrypt Passwords with PHP 5.5

1-signature.txt

password_hash($password, $algorithm, $options = []);

2-hash-password.php

$password = 'H@X04!';
$hash = password_hash($password, PASSWORD_BCRYPT, ['cost' => $cost]);

3-find-cost.php

// 100 milliseconds
// change this to your target time
$timeTarget = 0.1;

$cost = 8;

do {
    $cost++;
    $start = microtime(true);
    password_hash('test', PASSWORD_BCRYPT, ['cost' => $cost]);
    $end = microtime(true);
} while (($end - $start) < $timeTarget);

echo 'Appropriate Cost Found: ' . $cost . PHP_EOL;

4-validate-password.php

// true, hooray!
password_verify($password, $hash);

// false
password_verify('not the password', $hash);

// false
password_verify($password, 'not the hash');