Laravel Hash 密码安全性

/**
 * Hash the given value.
 *
 * @param  string  $value
 * @param  array  $options
 * @return string
 *
 * @throws \RuntimeException
 */
public function make($value, array $options = [])
{
    $hash = password_hash($value, PASSWORD_BCRYPT, [
        'cost' => $this->cost($options),
    ]);

    if ($hash === false) {
        throw new RuntimeException('Bcrypt hashing not supported.');
    }

    return $hash;
}

use Illuminate\Support\Str;
use Illuminate\Support\Facades\Hash;

class IndexController extends Controller
{
    /**
     * 获取哈希 key
     * https://github.com/laravel/framework/blob/6.x/src/Illuminate/Auth/Passwords/PasswordBrokerManager.php#L85
     * 
     * @return string
     */
    protected function get_hash_key()
    {
        $key = config('app.key');

        if (Str::startsWith($key, 'base64:')) {
            $key = base64_decode(substr($key, 7));
        }

        return $key;
    }

    public function index()
    {
        $hash_key = $this->get_hash_key();

        // 密码
        $password_value = 'zLoppLPKravEgs9d';

        // 哈希密码生成
        $password_hash = Hash::make($hash_key . $password_value);

        // 哈希密码验证
        if(Hash::check($hash_key . $password_value, $password_hash)) {
            // 验证成功
        }
    }
}