How secure is it to store and display passwords online using AES encryption in PHP?

Storing and displaying passwords online using AES encryption in PHP can provide an additional layer of security, but it is important to follow best practices to ensure the encryption key is securely stored and the encryption/decryption process is done correctly. It is recommended to use a strong encryption key, securely store it (e.g., in a separate configuration file), and use a secure method to transmit the key to the server (e.g., HTTPS). 

<?php

// Encryption key (should be stored securely)
$encryptionKey = "YourEncryptionKeyHere";

// Function to encrypt password
function encryptPassword($password, $encryptionKey) {
    $cipher = "aes-256-cbc";
    $ivLength = openssl_cipher_iv_length($cipher);
    $iv = openssl_random_pseudo_bytes($ivLength);
    $encrypted = openssl_encrypt($password, $cipher, $encryptionKey, 0, $iv);
    return base64_encode($iv . $encrypted);
}

// Function to decrypt password
function decryptPassword($encryptedPassword, $encryptionKey) {
    $cipher = "aes-256-cbc";
    $ivLength = openssl_cipher_iv_length($cipher);
    $data = base64_decode($encryptedPassword);
    $iv = substr($data, 0, $ivLength);
    $encrypted = substr($data, $ivLength);
    return openssl_decrypt($encrypted, $cipher, $encryptionKey, 0, $iv);
}

// Example usage
$password = "SecretPassword123";
$encryptedPassword = encryptPassword($password, $encryptionKey);
echo "Encrypted Password: " . $encryptedPassword . "\n";
echo "Decrypted Password: " . decryptPassword($encryptedPassword, $encryptionKey);

?>

Keywords

AES encryption PHP password storage online security data encryption

Related Questions