[0.2.0] - 2025-11-22
Added
- Support for WordPress 6.8+ password hashes with
$wp$ prefix
- Implements WordPress 6.8 HMAC-SHA384 + Base64 password verification method
- Support for standard BCrypt hashes (
$2y$, $2a$, $2b$) without prefix
- Debug logging for password hash detection and verification process
Changed
- Completely rewritten
verifyPassword() method to match WordPress 6.8 behavior
- WordPress 6.8+ now uses
hash_hmac('sha384', password, 'wp-sha384') before BCrypt
Maintained
- Full backward compatibility with legacy phpass hashes (
$P$, $H$)
- Existing configuration and database structure remain unchanged
⚠️ This is expected to be the final update. Development of this tool will be discontinued as both development and production environments have been fully migrated to Keycloak.
