How does wordpress password hash work? How does wordpress password hash work? wordpress wordpress

How does wordpress password hash work?


There is a comment in the implementation saying:

  28  /**  29   * Portable PHP password hashing framework.  30   *  31   * @package phpass  32   * @version 0.1 / genuine  33   * @link http://www.openwall.com/phpass/  34   * @since 2.5  35   */

The hashing framework used is phpass, and its page links to a Python implementation. Here's the link (.tar.gz). That page has some other useful links (such as a Perl implementation).


Just to add on, the following is a comment snippet from Wordpress 3.1's "\wp-includes\pluggable.php":

 /** * For integration with other applications, this function can be overwritten to * instead use the other package password checking algorithm. */