Virgil Pure

This free plugin secures user authentication for websites by replacing traditional password hashing with a cryptographic protocol. It is designed for site administrators who need stronger protection against credential theft, especially in the event of a database breach.

• Zero-Knowledge Proof System: The server never stores or has access to the user's actual password. Authentication occurs without transmitting or comparing the password directly, preventing exposure during login.
• Breach Protection: If a database is compromised, the stolen cryptographic records are useless to an attacker. The system allows administrators to cryptographically rotate all records, invalidating the stolen data without forcing users to reset their passwords.
• Recovery Key System: Provides a secure method to revert to the original password system if the plugin is deactivated. A private recovery key, stored offline, is required to decrypt and restore original password hashes.
• Record Updates: Administrators can periodically update all cryptographic records in the database using a token. This proactive security measure severs the link between current records and any potentially exposed data.
• Free and Open Source: The core cryptographic toolkit and this plugin are available at no cost, with source code accessible for review and integration.