Hi Is this plugin still effective or has WP updated its password hashing?
Thanks
]]>Hi, I have buddy-boss enabled in my site and I have enabled your plugin to override the WordPress default md5 password generation technique.
But after adding your plugin there is no change in the existing user password. The value of password is same as before when they were generated using md5 .
Please let me know whether your plugin has a compatibility with buddy-boss or I am missing something?
As you have mentioned no code need to be added or no settings need to be done. We have to add only the plugin that’s it everything will be managed automatically.
I’ve had issues with changing a password when this plugin is used together with the Ultimate Member plugin. I found once I deactivated PHP Native password hash, UM was able to change the password (but obviously using the WordPress standard way).
I have a support thread open with Ultimate Member, and they’ve asked about the filter hook you use. Could you check this out please?
https://www.ads-software.com/support/topic/change-password-not-working-5/
]]>I have a situation where I need to backload MD5 hashes into a WordPress site directly (updates are processed on an external system, and the MD5 hashed passwords passed via WebHook – we don’t get the plain text password). My understanding was the user should be able to login with their password if only the basic MD5 hash was stored in the database, and WordPress would update that on login to PHPass and reserve the new hash for future logins, but that doesn’t seem to work anymore. The login doesn’t throw an error, it just refreshes and doesn’t proceed to the logged in profile page.
Will your plugin recognize those old MD5 hashes, validate the login and generate a new password hash and store that in the database? Thanks!
]]>Hello,
We’ve implemented this plugin recently however have users (Lots of unused accounts etc) which we’re going to review doing a force password change due to our password 2FA/policies have changed over the years.
Will as password reset by an admin within the woocommerce or user management console trigger the rehashing ? I know it will transparently do it for active users on login but this is for those that do not login.
Many Thanks
]]>Hi,
How do I set this plugin to change the hash using normal md5, without using salt, etc?
Thank you
Hi
I tried this plugin on a local site that uses PHP 7.4, but this plugin does not change the default hash used by WordPress for user passwords, I have to change the password first to change the hash contained in the database.
How do I get this plugin to change the default hash used by WordPress, to a hash that is defined by your plugin automatically without changing the user password manually?
My wordpress is the latest WordPress version
Thank you
Hi just a quick question we have about 30k users that run with this plugin and we just want to ask if it’s still supported by you? And if so can you update the plugin page to display that info if not is it possible for you to help us support it on our own:)
]]>I have an issue with this plugin on WordPress Multisite directory.
I can log in to the main site, but can’t log in to the subdirectory multisite.
But the plugin works perfectly on WordPress single installation not multisite.
]]>Dears…
I have this message after install Woocommerce plugin (Another plugin has already overridden the password hashing mechanism. The “PHP native password hash” plugin will not work.)
then I deactivate and activate the plugin but still that message appears, and when I register new user the password hashing still MD5 hashing!
hi, do we still need to use this plug-in or has WP made a more secure system now?
Thanks
Hello dear Ayesh Karunaratne,
I heard about the Argon2 encryption method back when i was studying Computer Science.
And i would like to understand how this plugin works.
So i basically install this plugin on a site, and it will change the Databse encryption method from MD5 to Argon2?
Because in my studies we figures it was pretty simple to decrypt a string, /password through online tables. But argon2 was not as simple.
So does the plugin truly secure the database?
And also, does the plugin get regular updates, or is that not even important? just want to make sure it works with current instalment of the WordPress version.
Best Regards
]]>I recently came across the https://www.ads-software.com/plugins/password-hash/ plugin
I am using Simple WP Membership on my WordPress site, however passwords are stored in a cleartext method which is not good for security.
If I activate the Password-Hash plugin will it stop Simple WP Membership cleartext storage of passwords and hash them instead?
Thank you in advance for help.
Tim Bennett
]]>Hello
WP Version: 5.5.3
How can i force to use the bcrypt hashing algorithm and not the Argon2 algo even if its available?
Best,
Thomas
Is it possible to install this as a must-use plugin?
My understanding is that MU plugins need to be a single file, or at least if they do have other assets those should be in an unambiguously named folder to avoid loading confusion.
This plugin currently loads a second file, src/PasswordHash.php. It would be better if they could be rolled into one file, or failing that if the src folder was renamed to avoid ambiguity.
Updated to latests version and added “define( ‘WP_PASSWORD_HASH_ALGO’, PASSWORD_ARGON2ID );” to the wp-config.php, getting the following error.
( ! ) Warning: Use of undefined constant PASSWORD_ARGON2ID - assumed 'PASSWORD_ARGON2ID' (this will throw an Error in a future version of PHP) in /wp-config.php on line 85
How do I set the custom cost factors for the php password_hash?
]]>Hi @ayeshrajans,
Are you planning to release a version supporting WP 5.2.2?
Thanks and keep up with the good work!
Best regards
]]>In the FAQ it’s mentioned that there is a way to specify the algorithm. I can’t find it in the database options table, and there doesn’t appear to be a plugin settings page that I can see.
]]>Hello there, when I wan’t to use this plugin, I getting error with below message:
Another plugin has already overridden the password hashing mechanism. The “PHP native password hash” plugin will not work.
But, I don’t install any another Password Hashing plugin in my WordPress, and the password queries (that I see on phpMyAdmin, and in the user_pass column) are same as WordPress Formats, like $P$Bx.7WPgzxxxxxxxxx.Gxxxxxxxxxxx or $P$Bp1xxxxxxxxxxxxxxxxx/xxxx/.
What should I do for fix this problem? And, can you fix this issue?
Thank You ^_^
]]>This Plugin has been broken since quite a while, because apparently the PasswordHash class’s loading point has been moved and it’s no longer there when needed.
issue and PR here.
https://github.com/Ayesh/wordpress-password-hash/issues/3