Skip to content
Featherwebs

Use Strong Passwords

In Laravel, user passwords are usually stored in a hashed format in the database. Laravel includes the bcrypt algorithm for hashing passwords, which is a one-way encryption algorithm that is considered to be very secure. To use bcrypt in your application, you can use the Hash::make method, like this:

$password = 'mysecurepassword';
$hashedPassword = Hash::make($password);

To ensure that users are using strong passwords, you can implement password complexity rules and enforce them when users create or update their passwords. You can use the Validator class to define password validation rules, like this:

$validator = Validator::make($request->all(), [
    'password' => [
        'required',
        'string',
        'min:8',
        'regex:/^(?=.*[a-z])(?=.*[A-Z])(?=.*\d).+$/',
        'confirmed'
    ],
]);

This validator enforces the following rules for passwords:

  • The password field is required
  • The password must be a string
  • The password must be at least 8 characters long
  • The password must contain at least one lowercase letter, one uppercase letter, and one number
  • The password must be confirmed (i.e. the user must enter the same password twice)