harrym

<p>WordPress uses phpass to store passwords. Because WordPress has to work everywere, it uses the portable version of phpass,<br />
which uses MD5 to hash passwords. MD5 is not a very good hashing algorithm for passwords, because it’s relatively fast.</p>
<p>This plugin switches over to bcrypt, which is the algorithm recommended by phpass, and is a much better option for password<br />
storage because it is much slower to produce. This makes it much harder for an attacker who’s managed to access your hashed<br />
passwords to obtain plain text passwords by brute-forcing, or by trying passwords from a dictionary.</p>
<p><strong>Note: this plugin requires PHP 5.3.0 or newer</strong></p>
<p>Be aware that if you use this plugin and then move to a host that does not support bcrypt, you will need to reset any user<br />
account that you want to log in with.</p>


wp-bcrypt

wp bcrypt switches WordPress's password hashes from MD5 to bcrypt, making it harder for them to be brute-forced if they are leaked.

get3code

<p>Password for WP locks your whole website behind one password. Visitors see a clean, full-screen login screen until they enter the correct password, while your WordPress admin area (wp-admin) stays fully accessible.</p>
<p>It is perfect for sites in development, staging environments, private launches, client previews, or a simple maintenance mode. Setup takes less than a minute and the plugin is completely free.</p>
<h4>Key features</h4>
<ul>
<li>Protect the entire front-end of the site with one password.</li>
<li>Modern, responsive login screen with a clean, flat design.</li>
<li>Choose a background image from the WordPress Media Library and display it stretched as a full cover, with a live thumbnail preview in the settings.</li>
<li>Set a custom background color used as a fallback behind the image.</li>
<li>Add your own headings (H2 and H3) to greet or inform visitors.</li>
<li>Cache support: keeps the protection working when a page cache plugin is active (LiteSpeed Cache, WP Super Cache, W3 Total Cache and more).</li>
<li>Skip the password for logged-in users with a single switch.</li>
<li>CSRF-protected settings and hardened output escaping.</li>
<li>Available in English, Polish, German and French, and fully translation ready.</li>
</ul>
<h4>How it works</h4>
<p>When protection is enabled, every front-end request is checked for a valid access cookie. Visitors without the cookie are shown the login screen. After entering the correct password, a secure cookie is set for 30 days so they are not asked again. The WordPress login and admin panel are never blocked by the plugin.</p>
<h3>Upgrading</h3>
<p>For manual upgrades via FTP, deactivate and reactivate the plugin to ensure it works correctly.</p>
<h3>Translations</h3>
<p>Password for WP ships with English, Polish, German and French translations. Additional languages can be added using the included .po and .mo files in the /languages folder.</p>


Password for WP

Protect your entire WordPress site with a single password. Pick a background image, set your own message, and stay live behind a clean login screen.

wp-bcrypt vs Password for WP