Contributors: szepe.viktor
Tags: password, hash, bcrypt
Requires at least: 4.4
Tested up to: 4.5.2
Stable tag: 1.0.2
License: GPLv2 or later
License URI: http://www.gnu.org/licenses/gpl-2.0.html
Replaces wp_hash_password and wp_check_password with PHP 5.5's password_hash and password_verify.
wp-password-bcrypt is a WordPress plugin to replace WP's outdated and insecure MD5-based password hashing with the modern and secure bcrypt.
It is written by roots.io people.
This plugin requires PHP >= 5.5.0 which introduced the built-in
password_hash
and
password_verify
functions.
See Improving WordPress Password Security for more background on this plugin and the password hashing issue.
- Upload the plugin files to the
/wp-content/plugins/plugin-name
directory, or install the plugin through the WordPress plugins screen directly. - Activate the plugin through the 'Plugins' screen in WordPress
If you don't use Composer, you can manually copy wp-password-bcrypt.php
into your mu-plugins
folder.
We do not recommend using this as a normal (non-mu) plugin. It makes it too easy to disable or remove the plugin.
- Added license file, excuse me.
- This is the WordPress-stlye version of the original roots wp-password-bcrypt plugin