Download the PHP package divineomega/laravel-password-security-audit without Composer
On this page you can find all versions of the php package divineomega/laravel-password-security-audit. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download divineomega/laravel-password-security-audit
More information about divineomega/laravel-password-security-audit
Files in divineomega/laravel-password-security-audit
Package laravel-password-security-audit
Short Description Laravel Password Security Audit
License LGPL-3.0-only
Informations about the package laravel-password-security-audit
🔏 Laravel Password Security Audit
This package provides an Artisan command to audit the security of your users' passwords.
Laravel Password Security Audit works by executing a long running process that checks your users passwords against a list of over 10k commonly used weak passwords. When complete, it outputs a report of those users that are affected and the passwords that were found.
Installation
To install Laravel Password Security Audit, just run the following command from the root of your project.
Usage
In a standard Laravel installation using the default \App\User
model, you can just
run the security:password-audit
Artisan command.
While running a progress bar will be displayed indicating which user is being checked, and an estimate of how long the process will take to complete.
The speed of this process will take is dependent on the number of users your project has and your server's CPU performance. Multiple CPU cores will be taken advantage of if available.
When complete, you will be presented with a table of users with weak passwords.
For each user, this will include the user's primary key (usually the id
field),
the password found and its associated hash.
Custom user model
If you've moved the User
model, or want to check a different model, you can use
the --user-model
option. See the following example.
Custom password field
If the passwords you wish to check are stored in a different field, you can change
this using the --password-field
option. See the example below.
All versions of laravel-password-security-audit with dependencies
divineomega/php-cli-progress-bar Version ^2.1
divineomega/php-password-cracker Version ^1.1