Compile PHP 7.2 with Argon2
Argon2 is a new feature of PHP 7.2 as stated here: http://php.net/releases/7_2_0.php. It won the password hashing competition and is the recommended hashing algorithm.
It must be enabled my re-compiling PHP 7.2 with `--with-password-argon2`.
Thank you for your input! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
Argon2 is the recommended password hashing algorithm from Typo3 9.5 LTS. Please add it to PHP 7.2 and PHP 7.3.
Hakan Fragapane commented
I had nothing to compile. I was able to using directly argon2.
@Hakan Fragapane that is not correct. You need to compile PHP with Argon2 support, regardless of whether it's 7.2 or 7.3. I should know - I found out the hard way when installing via Plesk, and it's why I commented initially, and voted.
Check the link below, and see under the PASSWORD_ARGON2I and PASSWORD_ARGON2ID.
You need to compile with the option:
Hakan Fragapane commented
You can hash right now with argon2 without any installation if your php version is more than 7.2.0. Argon2I is the next extension and for this you need PHP 7.3.0. My Website already hashes with this algorythm. Argon2 is already there.
Christos Ploutarchou commented
Argon2 i think is the recommended hashing algorithm.
After weeks I succeeded, I put the link of the commands to run on centos to install plesk with php + argon2
This is really needed.
Cool Dark commented
Of course for PHP 7.3 also and couldn't it be possible to integrate at least with PHP 7.4 ?
So no changes for existing users with older php-versions is needed and Plesk does not have to communicate a possible "breaking change".
Kupper Websolutions commented
I don't understand why a feature poll is needed for webhosting platform focused on PHP?
It should be self-evident to integrate such an security related PHP feature ... Isn't it?
So please add Argon2 soon.
Christoph Flathmann commented
Security should be a top priority.
So please add Argon2 support for PHP.
Yes Argon2 wil be a welcome functionality
Thomas Anders commented
It's ridiculous that it's still not included.
TYPO3 for example uses ARGON2i as default.
Plesk has a TYPO3 installer but no ARGON2i.
pls implement this feature in Plesk.
ARGON2i is important
Currently without Argon2 in PHP, the only good choice if using password_hash is Bcrypt which is outdated. PHP added Argon2 support in its core - it should be compiled with it as intended and outlined here
Would like to add my vote to this. PHP 7.3 is here, and it would be nice if Plesk compiled 7.3 with Argon support.
When will Argon2 support be available?
Chris Bai commented
Password hashing/stretching with the latest algorithm is crucial for professional security related web applications. Argon2 support is welcomed for the next available plesk release.
We have customers asking for Argon2 Support.
We also have customer with Typo3, which asking for argon2 support with PHP 7.2/7.3