Hacker News Reader

Why does WordPress use md5? I understand that salting improves things quite a bit, but still.

Doesn’t password_hash() use bcrypt by default? Why not use it?

Nice, I’m glad such plug-in exists. My question is why hasn’t WP core adopted bcrypt yet. MD5 has been insecure for ages.

I’m not sure he mentions which version of Wordpress code he’s using.