WP Manifestindependent plugin directory
manifest / security / wp-password-argon

WP Password Argon WP Registry grade A. No security issues foundWP RegistryNo security issues foundOpen the reportA

Securely store WordPress user passwords in database with Argon2i hashing and SHA-512 HMAC using PHP's native functions.

★ 0stars
0.2.0latest · 12mo ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/jazz-man/wp-password-argon/archive/refs/heads/master.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
WP Password Argon Enhance WordPress security by replacing outdated MD5 password hashing with modern Argon2i encryption The Problem WordPress still uses MD5-based password hashing (via PHPass), an algorithm from 2001 that's considered weak by modern security standards. While adequate for its time, MD5 is vulnerable to: - ⚠️ Brute force attacks (fast to compute) - ⚠️ Rainbow table attacks - ⚠️ GPU-accelerated cracking The Solution This must-use plugin replaces WordPress's password hashing system with: - ✅ Argon2i - Winner of Password Hashing Competition (2015) - ✅ SHA-512 HMAC - Additional layer of protection - ✅ Automatic migration - Rehashes old passwords on login - ✅ Zero configuration - Drop in and forget - ✅ Backward compatible - Works with existing WordPress user system Key Features 🔐 Modern Cryptography - Argon2i algorithm - Memory-hard hashing designed to resist GPU attacks - SHA-512 HMAC - Adds salt-based message authentication - Native PHP functions - No external dependencies, uses PHP's passwordhash() 🔄 Seamless Migration - Automatically detects old MD5 hashes - Rehashes passwords when users login - No manual migration needed - Maintains backward compatibility d

Releases

2 releases.

Tag
Published
0.2.0 latest
Oct 23, 2025 12mo ago
Oct 30, 2022 3 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A grade

Security

WP Password Argon 0.2.0 · audited by WP Registry

No security issues found.

Audited release
0.2.0
Findings
none
Worst severity
—
Content hash
bfb2c09e079492ef25107758…

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.