WP Password Argon WP Registry grade A. No security issues foundWP RegistryNo security issues foundOpen the reportA
Securely store WordPress user passwords in database with Argon2i hashing and SHA-512 HMAC using PHP's native functions.
★ 0stars
0.2.0latest · 12mo ago
Install
This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.
Install straight from GitHub with WP-CLI:
wp plugin install https://github.com/jazz-man/wp-password-argon/archive/refs/heads/master.zipNo built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
WP Password Argon
Enhance WordPress security by replacing outdated MD5 password hashing with modern Argon2i encryption
The Problem
WordPress still uses MD5-based password hashing (via PHPass), an algorithm from 2001 that's considered weak by modern security standards. While adequate for its time, MD5 is vulnerable to:
- ⚠️ Brute force attacks (fast to compute)
- ⚠️ Rainbow table attacks
- ⚠️ GPU-accelerated cracking
The Solution
This must-use plugin replaces WordPress's password hashing system with:
- ✅ Argon2i - Winner of Password Hashing Competition (2015)
- ✅ SHA-512 HMAC - Additional layer of protection
- ✅ Automatic migration - Rehashes old passwords on login
- ✅ Zero configuration - Drop in and forget
- ✅ Backward compatible - Works with existing WordPress user system
Key Features
🔐 Modern Cryptography
- Argon2i algorithm - Memory-hard hashing designed to resist GPU attacks
- SHA-512 HMAC - Adds salt-based message authentication
- Native PHP functions - No external dependencies, uses PHP's passwordhash()
🔄 Seamless Migration
- Automatically detects old MD5 hashes
- Rehashes passwords when users login
- No manual migration needed
- Maintains backward compatibility d
Releases
2 releases.
These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.