Password Storage (And Hacking) in PHP by Anthony Ferrara at the PHP Benelux Conference 2013

Password storage is a common problem that every developer needs to solve at some point in their career. Often, we rely upon frameworks and libraries to do it for us. But do they get it right? How should passwords be stored? How are they going to be attacked? All these questions (and more) will be answered. This session will dive head first into password storage and all aspects surrounding it. We'll cover some common misconceptions and dangerous mistakes. We'll also explore some of the best available tools to solve the problem, and go into why they are the best. Finally, we'll look at some of the tools that attackers will use to attempt to extract plain text passwords. We'll explore each point from both angles: the pragmatic developer and the attacker. For the safety and security of your users, make sure that you know how to securely store their passwords. It's not just the right thing to do, but it is negligent not to!