title: Storing user passwords with PHP - designing for long term
body: <p>After reading many articles and docs regarding password handling, it's more than obvious that among best practices:</p>
  
  <ul>
  <li>I should not create custom encryption.</li>
  <li>I should use low level functionality in PHP in order to make sure (to the extent possible) that I will be able to adapt in the future if needed.</li>
  </ul>
  
  <p>I started using PHP crypt() function when I saw <a href="http://www.openwall.com/phpass/" rel="nofollow">phpass</a> Now I am halfway through in implementing a user model in my PHP app (using codeigniter) and I stopped in order to think:</p>
  
  <p>How I should design my code in order to be able to adapt and keep it working for many years to come? Is phpass in php spl library? Does this mean that support is ensured?</p>