Viktor Szépe

wp-password-bcrypt is a WordPress plugin to replace WP’s outdated and insecure 
MD5-based password hashing with the modern and secure <a href="https://en.wikipedia.org/wiki/Bcrypt" rel="nofollow ugc">bcrypt</a>.
It is written by <a href="https://roots.io/plugins/bcrypt-password/" rel="nofollow ugc">roots.io people</a>.
This plugin requires PHP >= 5.5.0 which introduced the built-in 
<a href="http://php.net/manual/en/function.password-hash.php" rel="nofollow ugc"><code>password_hash</code></a> and 
<a href="http://php.net/manual/en/function.password-verify.php" rel="nofollow ugc"><code>password_verify</code></a> functions.
See <a href="https://roots.io/improving-wordpress-password-security/" rel="nofollow ugc">Improving WordPress Password Security</a> 
for more background on this plugin and the password hashing issue.

Password bcrypt

Every WordPress installation needs password hashing with bcrypt. Thanks :)

Important plugin!

Simply the best

Replaces wp_hash_password and wp_check_password with PHP 5.5's password_hash and password_verify.

michaelrhmw

For legacy support with a wider range of PHP versions, WordPress opts to use PHPASS (a portible password hashing library) which WordPress defaults to using a MD5 based hash.
The security of your password hashes can be improved by using a modern password hashing algorithm, such as BCRYPT for PHP 5.5+ or ARGON2I for PHP 7.2+
This plugin aims to improve the security of the hashed passwords by using PHP 5.5’s password_hash() function and the BCRYPT algorithm but also supports the newer ARGON2I algorithm.
For extended support when password_hash() is not available this plugin will fallback to using PHPASS with additional security when compared to the WordPress defaults.

WP Modern Password Hashing

For legacy support with a wider range of PHP versions, Wordpress opts to use PHPASS (a portible password hashing library) which Wordpress defaults to  …

Password bcrypt vs WP Modern Password Hashing