WP Password Argon Two archived
Securely store WordPress user passwords in database with Argon2i hashing and SHA-512 HMAC using PHP's native functions.
by Typist Tech · github.com/typisttech/wp-password-argon-two · website
★ 25stars
3forks
Install
No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:
wp plugin install https://github.com/typisttech/wp-password-argon-two/archive/refs/heads/master.zipFrom the readme
[!CAUTION]
WP Password Argon Two has been abandoned.
If you want to maintain a fork of WP Password Argon Two, read this blog post (Wayback Machine snaptshot).
Otherwise, use roots/wp-password-bcrypt.
WP Password Argon Two
Securely store WordPress user passwords in database with Argon2i hashing and SHA-512 HMAC using PHP's native functions.
- Goal
- Magic Moments
- Requirements
- Do Your Homework
- PHP 7.2+ and compiled --with-password-argon2
- Installation
- Step 0
- Step 1
- Option A: Via Composer Autoload (Recommended)
- Option B: As a Must-use Plugin (Last Resort)
- Step 2
- Option A - Use Constants
- Option B - Use Environment Variables
- Usage
- Pepper Migration
- Argon2i Options
- Uninstallation
- Frequently Asked Questions
- What have you done with the passwords?
- I have installed this plugin. Does it mean my WordPress site is unhackable?
- Did you reinvent the cryptographic functions?
- Pepper migration look great. Does it mean that I can keep as many pepper keys as I want?
- What if my pepper is compromised?
- Is pepper-ing perfect?
- Is WordPress' phpass hasher or Bcrypt insecure?
- Why use Argon2i over the others?