diff --git a/reference/strings/functions/crypt.xml b/reference/strings/functions/crypt.xml
index 7871d96403..130b5f77f8 100644
--- a/reference/strings/functions/crypt.xml
+++ b/reference/strings/functions/crypt.xml
@@ -18,6 +18,12 @@
standard Unix DES-based algorithm or
alternative algorithms that may be available on the system.
+
+ The salt parameter is optional. However, crypt creates weak password without salt. PHP 5.6 or later raise E_NOTICE error without it. Make sure specify strong enough salt for better security.
+
+
+ password_hash uses strong hash, generates strong salt, applies proper rounds automatically. password_hash is simple crypt wrapper and compatible with existing password hashes. Use of password_hash is encouraged.
+
Some operating systems support more than one type of hash. In
fact, sometimes the standard DES-based algorithm is replaced by an
@@ -156,6 +162,12 @@
+
+ 5.6.0
+
+ Raise E_NOTICE security warning if salt is omitted.
+
+ 5.3.7
@@ -293,6 +305,7 @@ SHA-512: $6$rounds=5000$usesomesillystri$D4IrlXatmP7rx3P3InaxBeoomnAihCKRVQ
&reftitle.seealso;
+ password_hashmd5The Mcrypt extensionThe Unix man page for your crypt function for more information