Title: Password bcrypt Author: Viktor Szépe Published: May 12, 2016 Last modified: July 21, 2016 --- Search plugins This plugin **hasn’t been tested with the latest 3 major releases of WordPress**. It may no longer be maintained or supported and may have compatibility issues when used with more recent versions of WordPress. ![](https://s.w.org/plugins/geopattern-icon/password-bcrypt.svg) # Password bcrypt By [Viktor Szépe](https://profiles.wordpress.org/szepeviktor/) [Download](https://downloads.wordpress.org/plugin/password-bcrypt.1.0.3.zip) * [Details](https://wordpress.org/plugins/password-bcrypt/#description) * [Reviews](https://wordpress.org/plugins/password-bcrypt/#reviews) * [Installation](https://wordpress.org/plugins/password-bcrypt/#installation) * [Development](https://wordpress.org/plugins/password-bcrypt/#developers) [Support](https://wordpress.org/support/plugin/password-bcrypt/) ## Description wp-password-bcrypt is a WordPress plugin to replace WP’s outdated and insecure MD5-based password hashing with the modern and secure [bcrypt](https://en.wikipedia.org/wiki/Bcrypt). It is written by [roots.io people](https://roots.io/plugins/bcrypt-password/). This plugin requires PHP >= 5.5.0 which introduced the built-in [`password_hash`](http://php.net/manual/en/function.password-hash.php) and [`password_verify`](http://php.net/manual/en/function.password-verify.php) functions. See [Improving WordPress Password Security](https://roots.io/improving-wordpress-password-security/) for more background on this plugin and the password hashing issue. ## Installation 1. Upload the plugin files to the `/wp-content/plugins/password-bcrypt` directory, or install the plugin through the WordPress plugins screen directly. 2. Activate the plugin through the ‘Plugins’ screen in WordPress ## FAQ Manual installation as a must-use plugin If you don’t use Composer, you can manually copy `wp-password-bcrypt.php` into your` mu-plugins` folder. We **do not** recommend using this as a normal (non-MU) plugin. It makes it too easy to disable or remove the plugin. ## Reviews ![](https://secure.gravatar.com/avatar/b18a56afcfc46ecc99d5bbee5d1c245d12635c18ff5035ee6623665ac8583577? s=60&d=retro&r=g) ### 󠀁[Works Perfectly](https://wordpress.org/support/topic/works-perfectly-1396/)󠁿 [Ward](https://profiles.wordpress.org/yward/) March 19, 2018 Awesome! ![](https://secure.gravatar.com/avatar/9334d966dd8353fdefe13ddc01fb3b1b070742932ecec91ac7fd0215133847f1? s=60&d=retro&r=g) ### 󠀁[Simply the best](https://wordpress.org/support/topic/simply-the-best-310/)󠁿 [Martin Hlavac](https://profiles.wordpress.org/hlavacm/) November 15, 2017 Simple solution of an important issue ![](https://secure.gravatar.com/avatar/f530905ecec5d83ae0e11c3fe37607d6ce17a79ed1c3b5f825701d33d938260b? s=60&d=retro&r=g) ### 󠀁[Important plugin!](https://wordpress.org/support/topic/important-plugin-12/)󠁿 [Michal Danko](https://profiles.wordpress.org/michaldanko/) September 17, 2017 Every WordPress installation needs password hashing with bcrypt. Thanks 🙂 [ Read all 3 reviews ](https://wordpress.org/support/plugin/password-bcrypt/reviews/) ## Contributors & Developers “Password bcrypt” is open source software. The following people have contributed to this plugin. Contributors * [ Viktor Szépe ](https://profiles.wordpress.org/szepeviktor/) [Translate “Password bcrypt” into your language.](https://translate.wordpress.org/projects/wp-plugins/password-bcrypt) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/password-bcrypt/), check out the [SVN repository](https://plugins.svn.wordpress.org/password-bcrypt/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/password-bcrypt/) by [RSS](https://plugins.trac.wordpress.org/log/password-bcrypt/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.3 * Check for another password plugin. #### 1.0.2 * Added license file, excuse me. #### 1.0.1 * This is the WordPress-stlye version of the original [roots wp-password-bcrypt](https://github.com/roots/wp-password-bcrypt) plugin ## Meta * Version **1.0.3** * Last updated **10 years ago** * Active installations **2,000+** * WordPress version ** 4.4 or higher ** * Tested up to **4.5.33** * Tags * [bcrypt](https://wordpress.org/plugins/tags/bcrypt/)[hash](https://wordpress.org/plugins/tags/hash/) [password](https://wordpress.org/plugins/tags/password/) * [Advanced View](https://wordpress.org/plugins/password-bcrypt/advanced/) ## Ratings 5 out of 5 stars. * [ 3 5-star reviews ](https://wordpress.org/support/plugin/password-bcrypt/reviews/?filter=5) * [ 0 4-star reviews ](https://wordpress.org/support/plugin/password-bcrypt/reviews/?filter=4) * [ 0 3-star reviews ](https://wordpress.org/support/plugin/password-bcrypt/reviews/?filter=3) * [ 0 2-star reviews ](https://wordpress.org/support/plugin/password-bcrypt/reviews/?filter=2) * [ 0 1-star reviews ](https://wordpress.org/support/plugin/password-bcrypt/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/password-bcrypt/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/password-bcrypt/reviews/) ## Contributors * [ Viktor Szépe ](https://profiles.wordpress.org/szepeviktor/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/password-bcrypt/)