A reimagining of WordPress authentication using modern security practices.

Forces user password hashes as generated by WordPress to be more modern/secure.

Makes WordPress use PHP's native password_hash() functions for portable, stronger, and time-attack safe bcrypt and Argon2 hashes.