WordPress.org

Author: moggy

Semisecure Login Reimagined increases the security of the login process using an RSA public-key to encrypt the password on the client-side when a user logs in. The server side then decrypts the encrypted password with the private key. JavaScript is required to enable encryption. It is most useful for situations where SSL is not available, but the administrator wishes to have some additional security measures in place without sacrificing convenience.

This plugin is a "re-imagining" of the original Semisecure Login (which used one-way MD5 hashing). This version works with the new phpass hashed passwords that WordPress uses, as well as maintaining backwards compatibility with the older (pre WordPress 2.5) MD5 hashed passwords.

This plugin requires PHP to be compiled with openssl support, which is a pretty standard option for most hosts. This plugin has not been fully tested with WordPress running on a Windows server (if you've had success or failure here please let me know).