Chap Secure Password Login
Do not show password, during login, on an insecure channel (without SSL). Use a SHA-256 hash algorithm.
The facts
- Rating
- 3.1★ from 8
- Active installs
- 600+
- Price
- Free
- Last updated
- 7 Jun 2020
- Added
- Aug 2007
- Requires WP
- 2.5
- Tested up to
- WP 5.4.21
- Downloads
- 58,863
Our analysis
AI-assistedChap Secure Password Login is a WordPress plugin designed to encrypt passwords during the login process using the Chap protocol. It is particularly useful when secure protocols like SSL cannot be used, as it helps protect the password by obscuring it with a nonce generated by the session and transformed by the SHA-256 algorithm.
This plugin is suitable for users who need an additional layer of security for their login process without the need for complex configurations. It is a straightforward solution for those concerned about password transmission security on their WordPress sites.
Best for: This plugin suits users needing enhanced security for WordPress logins without SSL.
What it does well
- ✓Encrypts passwords using the Chap protocol
- ✓Obscures password with a nonce
- ✓Zero-configuration setup
Where it falls short
- •Only the username is transmitted unencrypted
- •Initial login may produce a technical error
- •Last updated in June 2020, may not be fully compatible with newer WordPress versions
Verdict
Chap Secure Password Login offers a basic level of password security for WordPress users. However, its limitations and outdated status may affect its reliability.
From the developer
Enrico Rossomando's own description of Chap Secure Password Login, lightly tidied.
Whenever you try to login into your website, you can use this plugin to trasmit your password encrypted. The encryption process is done by the Chap protocol; this is particularly useful when you can’t use ssl or other kinds of secure protocols. By activating the ChapSecureLogin plugin, the only information transmitted unencrypted is the username; password is hided with a random number (nonce) generated by the session – and opportunely transformed by the SHA-256 algorithm.
In the first login there will be an error, but don’t worry is only a tecnical error. Indeed in the next login’s operation, if the values are correct, there will not be errors, but you give mind because the password will sended in unencrypted way.
If you want more details about this algorithm, check “Building a CHAP Login System”.
This is a zero-configuration plugin.
Enrico Rossomando (redsend) this is my blog about programming, gaming and startup > https://www.mrred.it