[wp-trac] [WordPress Trac] #21022: Use bcrypt for password hashing; updating old hashes

WordPress Trac noreply at wordpress.org
Mon Dec 12 15:34:16 UTC 2022


#21022: Use bcrypt for password hashing; updating old hashes
-------------------------------------------------+-------------------------
 Reporter:  th23                                 |       Owner:  (none)
     Type:  enhancement                          |      Status:  new
 Priority:  normal                               |   Milestone:  Future
                                                 |  Release
Component:  Security                             |     Version:  3.4
 Severity:  major                                |  Resolution:
 Keywords:  2nd-opinion has-patch needs-testing  |     Focuses:
  dev-feedback                                   |
-------------------------------------------------+-------------------------

Comment (by ryanhellyer):

 Replying to [comment:142 bgermann]:
 > I interpret "works with" as "I can certainly log in".

 They'd still be able to log in with the suggestion above, albeit they'd
 need to reset their password if migrating from something with Argon2 to
 something without it.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/21022#comment:143>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list