This type of approach can reduce the overall randomness of the string, but whether or not this will be significant depends on exactly how you're using the string.
We know that str_shuffle() not cryptographically secure (because it tells us in the documentation), so imagine it has a bias that means the first character in the output string will always be one ...
Just use Argon2id.
Disclosure of passwords is bad. In your situation is would be a little bit more bad than usual. This does not change the countermeasure. Your question is simple, it is just buried under a lot of irrelevant facts. Doing a proper threat model and risk assessment would help you clarify the situation.
Note: This answer only attempts to deal ...
I believe a company would be doing themselves a major disservice if they were not using a multi-signature scheme to protect their important funds. Each withdrawal from the company funds should need to be authorized by a minimum threshold of private keys controlled by key persons, preferably technically-minded higher-ups.
Different blockchains have slightly ...
Since 2019, OpenSSH defaults to 3072 bit keys for RSA:
ssh-keygen(1): Increase the default RSA key size to 3072 bits,
following NIST Special Publication 800-57's guidance for a
128-bit equivalent symmetric security level.