WordPress Password Hasher

Generate WordPress-compatible password hashes (phpass) for database updates or verify existing hashes. Secure client-side processing.

Enter a password to generate a WordPress hash

WordPress Password Security

WordPress stores passwords as cryptographic hashes using the phpass library. This tool generates and verifies these hashes client-side, perfect for database password resets or security audits without exposing credentials to any server.

WordPress Compatible

Why Use This Tool?

100% Client-Side

Your passwords never leave your browser. All hashing happens locally using JavaScript.

Password Recovery

Reset locked WordPress accounts by generating a new hash for the database.

Hash Verification

Verify if a password matches an existing WordPress hash for security audits.

phpass Compatible

Generates standard WordPress hashes starting with $P$ that work in all WP versions.

How this WordPress Password Hasher works

This security tool generates WordPress-compatible password hashes using the phpass (portable PHP password hashing) algorithm that WordPress employs for user authentication. The implementation creates hashes starting with $P$ identifier followed by iteration count marker and 22-character salt, matching the exact format stored in wp_users database table.

The hashing process applies MD5 through multiple iterations (2^8 = 256 by default) with salt concatenation, producing cryptographically strong hashes resistant to rainbow table attacks. Each hash generation uses cryptographically random salt values from the Web Crypto API, ensuring unique outputs even for identical passwords.

Password verification mode checks whether a plain-text password matches an existing WordPress hash without knowing the original password. All cryptographic operations execute locally in your browser—passwords never transmit to external servers. Perfect for database password resets, security audits, or WordPress development testing.

How to use this WordPress Password Hasher

1

Enter Password

Type the password you want to hash or verify.

2

Generate or Verify

Create a WordPress-compatible hash or verify an existing one.

3

Copy Result

Copy the generated hash for use in WordPress database.

Example Usage

Generating a WordPress-compatible hash:

Input
Password: admin123
Output
$P$BwGKH4kQKxZMD7cMpjJhKMdRYXs1Xt1

Frequently Asked Questions

What is a WordPress password hash?
WordPress uses the phpass library to create secure password hashes. These hashes start with $P$ and are stored in the wp_users database table instead of plain text passwords.
Can I use this to reset a WordPress password?
Yes! Generate a hash here and update it directly in your wp_users table via phpMyAdmin or MySQL. The user can then log in with the new password.
Is this hash compatible with all WordPress versions?
Yes, this generates phpass-compatible hashes that work with WordPress 2.5 and later, which covers virtually all active WordPress installations.
Is it safe to generate passwords here?
Yes, all hashing happens locally in your browser using JavaScript. No passwords are sent to any server, ensuring complete privacy.
Why does the hash change each time?
WordPress uses random salts for each hash, so the same password produces different hashes. All valid hashes for a password will verify correctly.

Related Tools

The WordPress Password Hasher is maintained by CodeItBro. We aim to provide the best free developer tools on the web. If you have feedback or suggestions, please visit our contact page.

Featured on

CodeItBro - Free dev tools + practical guides to help you ship faster | Product HuntCodeItBro - Free Online Developer Tools badgeCodeItBro badge