Password bcrypt
Replaces wp_hash_password and wp_check_password with PHP 5.5's password_hash and password_verify.
The facts
- Rating
- 5★ from 3
- Active installs
- 1k+
- Price
- Free
- Last updated
- 21 Jul 2016
- Added
- May 2016
- Requires WP
- 4.4
- Tested up to
- WP 4.5.33
- Downloads
- 31,738
Our analysis
AI-assistedPassword bcrypt is a WordPress plugin designed to enhance password security by replacing the outdated MD5-based password hashing with bcrypt. This modern hashing method provides improved security for user passwords. The plugin is suitable for WordPress users who want to ensure better protection for their site's login credentials.
The plugin requires PHP version 5.5.0 or higher, as it relies on built-in functions for password hashing and verification. It is aimed at those who are concerned about the security of their WordPress site and want to implement stronger password protection methods.
Best for: This plugin is best for WordPress users looking to improve their site's password security.
What it does well
- ✓Replaces insecure MD5 password hashing
- ✓Uses modern bcrypt hashing for better security
- ✓Free to use from the WordPress.org directory
- ✓Active installation count of 1,000
Where it falls short
- •Last updated in July 2016
- •Tested only up to WordPress version 4.5.33
- •Directory score of 50/100 indicates average performance
Verdict
Password bcrypt offers a straightforward solution for enhancing password security in WordPress. However, its age and limited updates may be a concern for some users.
From the developer
Viktor Szépe's own description of Password bcrypt, lightly tidied.
wp-password-bcrypt is a WordPress plugin to replace WP’s outdated and insecure
MD5-based password hashing with the modern and secure bcrypt.
It is written by roots.io people.
This plugin requires PHP >= 5.5.0 which introduced the built-in
password_hash and
password_verify functions.
See Improving WordPress Password Security
for more background on this plugin and the password hashing issue.