How to Manually Encode a Password

If, for example, you're storing users in the database, you'll need to encode the users' passwords before inserting them. No matter what algorithm you configure for your user object, the hashed password can always be determined in the following way from a controller:

1
2
3
4
5
6
7
8
9
10
11

use Symfony\Component\Security\Core\Encoder\UserPasswordEncoderInterface;

public function register(UserPasswordEncoderInterface $encoder)
{
    // whatever *your* User object is
    $user = new App\Entity\User();
    $plainPassword = 'ryanpass';
    $encoded = $encoder->encodePassword($user, $plainPassword);

    $user->setPassword($encoded);
}

In order for this to work, just make sure that you have the encoder for your user class (e.g. App\Entity\User) configured under the encoders key in config/packages/security.yaml.

The $encoder object also has an isPasswordValid() method, which takes the User object as the first argument and the plain password to check as the second argument.