wp_hash_password()
Encrypts the specified text to make a password hash from it.
Creates a hash from plain text. The hash is always unique, i.e. if the function is called 2 times, the results will be different. see example 1.
The function uses the PasswordHash class, which is located in /wp-includes/class-phpass.php. PasswordHash can be configured, see the example.
This is a pluggable function, and it can be replaced by a plugin. It means that this function is defined (works) only after all plugins are loaded (included), but before this moment this function has not defined. Therefore, you cannot call this and all functions depended on this function directly from a plugin code. They need to be called on plugins_loaded hook or later, for example on init hook.
Function replacement (override) — in a plugin you can create a function with the same name, then it replace this function.
No Hooks.
Return
String. The hash string of the password.
Usage
wp_hash_password( $password );
- $password(string) (required)
- Plain text user password to hash.
Examples
#1 Function operation example
echo wp_hash_password( 'my_pass' ); //> $P$B1tp3GD53ykbIGC4hf84pvbEjSUloq. // let's encrypt again in the same way echo wp_hash_password( 'my_pass' ); //> $P$Bu3CWn/Y0zTG8IXJ8ee9yiT715tWxG/
#2 Set global variable $wp_hasher, to create a password with the required parameters:
global $wp_hasher; $wp_hasher = new PasswordHash( 16, FALSE ); $hashedPassword = wp_hash_password( $password );
#3 Let's compare the encrypted password with not encrypted one
$wp_hasher = new PasswordHash( 8, TRUE );
$password_hashed = '$P$B55D6LjfHDkINU5wF.v2BuuzO0/XPk/';
$plain_password = 'test';
if( $wp_hasher->CheckPassword($plain_password, $password_hashed) ) {
echo "The passwords match";
}
else {
echo "The password is not correct";
}
Notes
- Global. PasswordHash. $wp_hasher PHPass object
Changelog
| Since 2.5.0 | Introduced. |
wp_hash_password() wp hash password code WP 6.1.1
function wp_hash_password( $password ) {
global $wp_hasher;
if ( empty( $wp_hasher ) ) {
require_once ABSPATH . WPINC . '/class-phpass.php';
// By default, use the portable hash from phpass.
$wp_hasher = new PasswordHash( 8, true );
}
return $wp_hasher->HashPassword( trim( $password ) );
} 