harrym

<p>WordPress uses phpass to store passwords. Because WordPress has to work everywere, it uses the portable version of phpass,<br />
which uses MD5 to hash passwords. MD5 is not a very good hashing algorithm for passwords, because it’s relatively fast.</p>
<p>This plugin switches over to bcrypt, which is the algorithm recommended by phpass, and is a much better option for password<br />
storage because it is much slower to produce. This makes it much harder for an attacker who’s managed to access your hashed<br />
passwords to obtain plain text passwords by brute-forcing, or by trying passwords from a dictionary.</p>
<p><strong>Note: this plugin requires PHP 5.3.0 or newer</strong></p>
<p>Be aware that if you use this plugin and then move to a host that does not support bcrypt, you will need to reset any user<br />
account that you want to log in with.</p>


wp-bcrypt

wp bcrypt switches WordPress's password hashes from MD5 to bcrypt, making it harder for them to be brute-forced if they are leaked.

Danny Santoro

<p>Help secure your WooCommerce site by enforcing stronger passwords and taking additional control of your strength requirements.</p>
<h3>What does this plugin do?</h3>
<p>WooCommerce has an integrated Password Strength Meter which forces users to use strong passwords. Sometimes this isn’t desirable – with this plugin, you can choose between five password levels ranging from “Anything Goes” to “Strong Passwords Only”. In addition, you can modify the colors and appearance of these custom messages, as well as modify or remove the password hint. For details on how the password strength is determined, <a href="https://github.com/DanielSantoro/wc-password-strength-settings/wiki/How-Password-Strength-is-Determined" rel="nofollow ugc">please read the documentation here</a>.</p>
<h4>What’s New?</h4>
<p>Version 3.0.0 is a bit of a rewrite to bring the plugin up to modern coding standards. Functionality should not be impacted, but if it is, please reach out on the support forums.</p>
<p>Version 3.0.1 is simply a hotfix declaring compatibility with WooCommerce HPOS. Since this plugin doesn’t touch anything with the orders or order metadata, it shouldn’t be impacted at all. <em>However</em>, if you notice any issues then please reach out via the contact form on my website.</p>
<h4>Notes</h4>
<p>While this does allow for user accounts to have weaker passwords, it’s a good idea to still encourage strong password use – <em>especially</em> for administrators!</p>
<h4>Planned Features</h4>
<ul>
<li>Option to remove “- Please enter a stronger password.” that is added by WordPress.</li>
<li>Nothing else at the moment, but let me know if you have any ideas.</li>
</ul>


Password Strength Settings for WooCommerce

Great work

Works great.

Help secure your WooCommerce site by enforcing stronger passwords and taking additional control of your strength requirements.

wp-bcrypt vs Password Strength Settings for WooCommerce