WordPress.org

Ready to get started?Download WordPress

Forums

2.3 to 2.5 password hashing? (2 posts)

  1. Stevish
    Member
    Posted 6 years ago #

    I am very excited about the new password security in wordpress 2.5. I am already running a test blog with 2.5RC1, and I noticed that the password hashes are much more custom. Not to mention, there is a place in wp-config for a custom salt! That's pretty cool!

    But here's my problem. What will happen to my existing users' passwords if I customize that salt? And how will it verify the old users passwords once I update?

    Just wondering...

  2. Well, for you to test it yourself, your best bet would be to add a user, set the password, change the salt, and give it a shot...

    The only way that I could see that it *should* work would be to save the salt at the time in the users table along with the password and other information. A quick look into the database should show us if it's there or not, but unfortunately I can't check mine from work...

    I can check back later this evening and let you know though!

Topic Closed

This topic has been closed to new replies.

About this Topic