在yii2登录中需要密码哈希，令牌，身份验证密钥

Question

what need of all three in yii2 login,i am new to yii2 framework and i want to know use of all these three. thanks in advance.

Answer 1

There are methods to crack an md5-hash, so md5 is not meeting the requirements for good data security. Sure you could use md5 - many companies still do that - but it isn't a save method. If you already have all passwords hashed with md5 and want to hash them with another method, there are a few good ways to do that.

Ps. The Authkey is

used to verify cookie-based login. The key is stored in the login cookie and will be later compared with the server-side version to make sure the login cookie is valid. - http://www.yiiframework.com/doc-2.0/guide-security-authentication.html