harrym

WordPress uses phpass to store passwords. Because WordPress has to work everywere, it uses the portable version of phpass, 
which uses MD5 to hash passwords. MD5 is not a very good hashing algorithm for passwords, because it’s relatively fast.
This plugin switches over to bcrypt, which is the algorithm recommended by phpass, and is a much better option for password 
storage because it is much slower to produce. This makes it much harder for an attacker who’s managed to access your hashed 
passwords to obtain plain text passwords by brute-forcing, or by trying passwords from a dictionary.
Note: this plugin requires PHP 5.3.0 or newer
Be aware that if you use this plugin and then move to a host that does not support bcrypt, you will need to reset any user 
account that you want to log in with.

wp-bcrypt

wp bcrypt switches WordPress's password hashes from MD5 to bcrypt, making it harder for them to be brute-forced if they are leaked.

Fidgety Lizard

Kona Macphee

PLEASE NOTE: AS OF WP 5.7, THIS PLUGIN IS NO LONGER SUPPORTED.
Since WordPress 4.3, new users are no longer sent their passwords directly by email. Instead, they are sent a message containing a link to the Reset Password page, where they can choose their own password. Additionally, the Reset Password page now appears with a strong password already suggested in the “New password” field.
This plugin removes the suggested password from the Reset Password page, leaving the “New password” field empty. Below this field it adds a “Suggest a password” button whose action is to fetch a new suggested password via Ajax.
Also since 4.3, Firefox and Chrome users may notice problems saving their new password in their browser from the Password Reset page. (Firefox saves the password with an empty username; Chrome sets the username and password to the password value.) This plugin tweaks the password reset form so that these browsers can successfully save the username and newly-reset password if the user wishes.
Note that Internet Explorer, Edge and Safari will not offer to save the password from the Password Reset page, and this plugin does not change that behaviour. Therefore, the plugin adds a configurable warning message to the Password Reset screen, advising users to make a note of their new password.
The form tweaking for Firefox/Chrome and the configurable warning message are enabled by default, but they can be disabled in the administration settings.

Clarify Password Reset

When working with sites with lots of members unfortunately you realise most people are complete idiots.. 
Thanks to this plugin these idiots doesn't assume their password has been reset already to a "sooooo hard" string. I've never experienced the saving issues with chrome and FF so I disabled that but the suggest button is a good softer alternative to prefilled password field. 
Keep up the good work!



Does the trick!

As I had a new member who did not understand how to get his password, I thing the plugin is a very good idea and should inspired WP official team.



very good idea

AS OF WP 5.7, THIS PLUGIN IS NO LONGER NEEDED OR SUPPORTED.
Clears initial suggested password on WP 4.3+ password reset page, and adds a Generate Pass …

wp-bcrypt vs Clarify Password Reset