<?PHP
$hash = password_hash("漢字",PASSWORD_DEFAULT);
?>

<?PHP

$pass = 0;
$fail = 0;

# Generate 100 random unicode passwords
for ($i = 0; $i < 100; $i++) {
    $password = '';
    for ($p = 0; $p < 10; $p++) {
        $password .= mt_rand(0xa1,0xffff);
    }

    # Test password hashing
    $hash = password_hash($password,PASSWORD_DEFAULT);
    if (password_verify($password,$hash)) {
        $pass++;
    } else {
        $fail++;
    }
}

echo "Pass: $pass\nFail: $fail\n";

结果：

Pass: 100
Fail: 0

你的问题的答案是肯定的,这是安全的.