Search code examples
wordpresspasswordspassword-encryptionpassword-hashpassword-storage

Password store in wordpress database in table wp_users


How is the password being stored in the table wp_users in wordpress database? I wanted to know what is the algorithm being used to stre password values in the column user_pass


Solution

  • Wordpress uses php's crypt method to hash the password. Here's the method used to hash the password in Wordpress's source code: https://github.com/WordPress/WordPress/blob/2651ff3ae805321432bc6d9eac3d62269c937077/wp-includes/class-phpass.php#L236

    Wordpress generates a salt string on which to bash the hashing for this particular method in that same class.