PHP Native Password Hash

This plugin swaps out WordPress core’s password hashing mechanism with PHP 5.5’s password_hash() and its accompanying functions. By default, PHP uses bcrypt to hash the passwords. If available, this plugin will use modern Argon2 algorithm. The transition will be transparent.

• A password salt will be generated using a Cryptographically Secure Pseudo-Random Number Generator (CSPRNG)
• Password hashes are safe from dictionary attacks with rainbow tables or any other precomputed hash lists, because a secure salt is generated for each password.
• The password hashing is iterated multiple times to provide a good resistance against brute-force attacks.
• Password checks are made in a way that it mitigates time-attacks.
• You do not have to reset passwords of all users. Passwords already hash…