3 ms·
Why does WordPress use md5? I understand that salting improves things quite a bit, but still. Doesn’t password_hash() use bcrypt by default? Why not use it?
by tambourine_man 6y ago
Why does WordPress use md5? I understand that salting improves things quite a bit, but still.
Doesn’t password_hash() use bcrypt by default? Why not use it?
- bretthopper 6y agohttps://github.com/roots/wp-password-bcrypt#the-problem https://github.com/roots/wp-password-bcrypt#the-problem
- tambourine_man 6y agoNice, I’m glad such plug-in exists. My question is why hasn’t WP core adopted bcrypt yet. MD5 has been insecure for ages.
- weewee2018 6y agoI’m not sure he mentions which version of Wordpress code he’s using.