Is that less secured ?
echo password_hash("rasmuslerdorf", PASSWORD_DEFAULT); => $2y$12$QjSH496pcT5CEbzjD/vtVeH03tfHKFy36d4J0Ltp3lRtee9HDxY3K
And with extra cost:
$options = [ 'cost' => 12, ]; echo password_hash("rasmuslerdorf", PASSWORD_BCRYPT, $options); =>$2y$12$QjSH496pcT5CEbzjD/vtVeH03tfHKFy36d4J0Ltp3lRtee9HDxY3K
Is that "too predictable" ?
Extra question : if an encrypted password above is exposed, how long is would take to "crack" one ? Given that the hackers have dozen of good computers which only took few hours to crack our admin password in sha256 without knowing the salt.
Disclaimer : I first read about encryption 13 years ago but my brain CPU was never able to fully process those concepts, too much math. Now my boss assign me the task, so I guess asking simple question may help me a little.