[wp-trac] [WordPress Trac] #21022: Use bcrypt for password hashing; updating old hashes

[WordPress Trac]

#21022: Use bcrypt for password hashing; updating old hashes
-------------------------------------------------+-------------------------
 Reporter:  th23                                 |       Owner:
                                                 |  johnbillion
     Type:  enhancement                          |      Status:  reopened
 Priority:  normal                               |   Milestone:  6.8
Component:  Security                             |     Version:  3.4
 Severity:  normal                               |  Resolution:
 Keywords:  has-patch needs-testing has-unit-    |     Focuses:
  tests has-dev-note                             |
-------------------------------------------------+-------------------------

Comment (by yani.iliev):

 It is quite common to transfer a website between different versions of
 WordPress. Right now, this will break all transfer/migration plugins. It
 will be great to have the ability to support bcrypt via a polyfill before
 the actual release and allow time for theme/plugin developers to act on
 it.
 I found these two plugins adding support for bcrypt:
 https://github.com/Ayesh/WordPress-Password-Hash
 https://github.com/roots/wp-password-bcrypt

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/21022#comment:234>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform