How to decode ( decode ) a hashed password ( password_hash() ) in Symfony 2?

Question

symfony

Welcome all.
Help to deal with the situation:
1. Registration, authorization and authentication on the site - everything works.
2. The functionality works, which, when data changes (login, password, etc.), sends updated user data to the admin mail, but I can’t figure out how from hashed with password_hash( $self->getPassword(), PASSWORD_BCRYPT, array ( 'cost' => 12 ) ) of the password extract the original password itself.
Who knows, tell me. Thank you.

Answer 1

No way. The point of the hash is that it is impossible to get the original password from it.
Even brute force will not help you if your password length is more than 3-5 characters.
If you need the password itself, then there is only one way to get it - use it at the same time as it was received from the user, that is, send it to the admin / user in the same request as the password is regenerated.
And if the password is needed later (for example, for the password recovery function), then this will not work - the password must be recreated again.

Answer 2

If you have such a need, then you are doing something wrong. This algorithm was invented for this purpose, so that it could not be decoded.
And you don't need to store the password in clear text. The database will be taken away from you, and the attacker will have access to all the accounts of all your users, since many use the same login and password for all services.
Because of such craftsmen, one has to have separate passwords for dubious shit sites.

Answer 3

hashed password

no way, only brute-force collision can be picked up, which in the case of BCRYPT will be very long.
What you need to do is remember the original password before hashing. And that's all. And it’s better to somehow do something so that it would not be sent anywhere.