Password reset: "This password does not use the Bcrypt algorithm."

Hello,

I have a route like this:

Route::get('password/initialize/{token}', 'Auth\ResetPasswordController@showResetForm')->name('password.initialize');

Because I send an e-mail when I manually create a user inside my web app and the user should get the e-mail and click a link like http://example.com/password/initialize/oIeiHEnPPOLFUTREVERaOdda when he does he is redirected to the default reset password page (generate with something like php artisan make:auth) and when it enters its email address along with the new password and the confirmation he receives the following error:

    'This password does not use the Bcrypt algorithm.'

Which is from the vendor/laravel/framework/src/Illuminate/Hashing/BcryptHasher.php file, inside function "check".

Can somebody helps please ?

scottplunkett

7 years ago

Level 9

Is the password being hashed before it is saved to the database?

$hashedPassword = Hash::make('plain-text-password');

$user->password = $hashedPassword;
$user->save();

3 likes

Please or to participate in this conversation.