Password Hash Characters

If I use the password_hash("password", PASSWORD_DEFAULT) function to hash a string, will it always result in a string which uses only the following characters?
0-9A-Za-z.$/
That is numbers, letters A to Z in upper and lower cases, Period, Dollar and forward slash.

Not necessarily. The exact hashing mechanism can be changed at any time to a more efficient one and it is impossible to predict what characters will be used in password hashes in five years time.

2 Likes

That’s what I was thinking. The manual says it may change over time.

Note that this constant is designed to change over time as new and stronger algorithms are added to PHP.

It appears to only use those at present, but I can’t rely on that always being the case.

This topic was automatically closed 91 days after the last reply. New replies are no longer allowed.