plugin-icon

Password bcrypt

Replaces wp_hash_password and wp_check_password with PHP 5.5's password_hash and password_verify.
Ratings
5
Last updated
July 21, 2016
Version
1.0.3
Active installations
3K

wp-password-bcrypt is a WordPress plugin to replace WP’s outdated and insecure MD5-based password hashing with the modern and secure bcrypt.

It is written by roots.io people.

This plugin requires PHP >= 5.5.0 which introduced the built-in password_hash and password_verify functions.

See Improving WordPress Password Security for more background on this plugin and the password hashing issue.

Freeon Creator plan
Active installations
3K
Tested up to
4.5.32
This plugin is available for download to be used on your WordPress self-hosted installation.