Password hashing

An article I read recently stated that a hashed 8-character password could be cracked in about 2 days, assuming the 8-character password was extremely complex. Given the process usually involved, cracking an entire list of passwords stolen from a site is generally expected to take as long as the time required to crack the most complex password used on that site.

That said, 8 characters is a common choice for a minimum length. Then you usually add the complexity requirements, such as requiring a mixture of lower/uppercase characters, numbers, and symbols.

Bonfire

Practical CodeIgniter 3
CodeIgniter Testing Guide