[wp-trac] [WordPress Trac] #33904: user_activation_key is too short causing password reset process to break when using bcrypt

[WordPress Trac]

#33904: user_activation_key is too short causing password reset process to break
when using bcrypt
--------------------------+------------------------------
 Reporter:  tomdxw        |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Users         |     Version:  4.3
 Severity:  normal        |  Resolution:
 Keywords:                |     Focuses:
--------------------------+------------------------------

Comment (by shazahm1@…):

 Ha! I wish I would have been able to find this sooner! I spent 5 hours
 trying to track down why password resets were no longer working for users.
 I too use bcrypt which was causing the hash to be 71 characters long which
 would cause the db update to fail for user_activation_key to fail.
 changing this to 100 fixed it for me but core should allow longer hashed
 to be stored by default for a bit more breathing room.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/33904#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform