This plugin secures user passwords for website administrators, replacing traditional hashing with advanced cryptography. It prevents attackers from using stolen password data, even if they gain access to your database.

• Zero-Knowledge Password Protection: The system never stores or transmits the actual user password, preventing exposure during a breach.
• Invalidate Stolen Data: If your database is compromised, you can cryptographically update all records, rendering the stolen data useless without forcing users to change passwords.
• Recovery Key System: Allows safe deactivation of the plugin by encrypting and storing original password hashes, which can be restored using a securely stored private key.
• Free and Open Source: The core cryptographic toolkit is available without cost, with libraries published on GitHub.
• PHP Extension Required: Installation requires adding specific cryptographic extensions to your server environment (PHP 7.2 or 7.3) before activating the plugin.