Increase Cost on bcrypt passwords

[Wayne Luke]

Valid for vBulletin 5.4.5 and higher.

As processors get more powerful, the time co-efficient to decode password hashes decreases. With vBulletin 5, you can increase the cost co-efficient so that the time stays the same with more powerful processors. The attached file does this for the default password hashing schema in vBulletin 5.4.5 and higher.

To install, simply upload the XML file into your /core/includes/xml folder. No other settings are needed. The next time your users log in, their passwords will be stored with the increased cost.

[DamasGate]

Thank you very much.

If removed in the In the future, Will we face any login problems?

Thanks again

[delicjous]

Thank you.

I upload it to a testforum and there was no change in user-table (token, scheme and secret), datastore 'pwschemes' or passwordhistory. Do this change any data to check if it is working?

[Wayne Luke]

After the user's next login, the cost in their password hash will change from 10 to 15. That would be the only data change in the database.

[Wayne Luke]

If removed in the In the future, Will we face any login problems?


Users will need to reset their passwords in order to login.

[delicjous]

Just for information.
I got an error by upgrade to the latest 5.5.6 Alpha as long as I have this file in the core/includes/xml folder (step 19).

Something like "missing error_x phrase"

After delete the pwschemes_xustom file the upgrade run until the complete screen.