XenForo Password Generator Hash generators
Generate XenForo 2 compatible password hashes with bcrypt. Supports both raw bcrypt and PHP serialized format for forum authentication. Perfect for XenForo migration, SSO integration, and user creation scripts.
Password Input
Length: 0
Strength: -
XenForo Specification:
Uses bcrypt cost factor 10 ($2a$10$) - Standard XenForo 2 implementation
XenForo 2 Compatible
Generated Hash
Developer Guide
XenForo 2 Password System
XenForo 2 uses bcrypt for password hashing with specific implementation details that ensure compatibility across the platform.
Technical Specifications
| Algorithm: | Bcrypt (Eksblowfish) |
| Cost Factor: | 10 (2^10 = 1,024 iterations) |
| Hash Prefix: | $2a$10$ (XenForo standard) |
| Hash Length: | 60 characters |
| Storage Format: | PHP serialized array |
| Database Table: | xf_user_authenticate |
| Scheme Class: | XF:Core12 (default) |
Hash Format Structure
$2a$10$N9qo8uLOickgx2ZMRZoMyeIjZAgcfl7p92ldGxad68LJZdL17lhWy
- $2a$ - Algorithm identifier (bcrypt variant)
- 10 - Cost factor (XenForo standard)
- N9qo8uLO... - Salt (22 characters)
- IjZAgcfl... - Hash (31 characters)
Serialized Storage Format
a:1:{s:4:"hash";s:60:"$2a$10$N9qo8uLOickgx2ZMRZoMyeIjZAgcfl7p92ldGxad68LJZdL17lhWy";}
XenForo stores password hashes in a serialized PHP array format in the xf_user_authenticate table's data column.
Database Schema
CREATE TABLE xf_user_authenticate (
user_id INT UNSIGNED NOT NULL PRIMARY KEY,
scheme_class VARCHAR(100) NOT NULL DEFAULT 'XF:Core12',
data MEDIUMBLOB NOT NULL,
remember_key VARCHAR(32) NOT NULL DEFAULT ''
);Why XenForo Uses Cost 10
- Balance: Provides strong security while maintaining reasonable login times
- Compatibility: Works well across various server configurations
- Standard: Established since XenForo 1.2 for consistency
- Performance: ~60-100ms hash time on average servers