Use PHP 5.5 password_hash/password_verify instead of hash with sha256