Skip to content
PluginCanary

PHP Native Password Hash

by Ayesh Karunaratne · 1,000+ active installs · Checked 3 Nov 2026
At risk1 Critical1 Warning

At risk: no release in 29 months (last release 10 Jun 2024).

59/ 100 Canary Score

Capped at 59 while a Critical signal is open.

Sub-scores for PHP Native Password Hash
Ownership100
Maintenance0
Security100
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • CriticalMNT-1No release in 29 months (last release 10 Jun 2024). Plan a replacement if the plugin is important to your site.10 Jun 2025Evidence
  • WarningMNT-2Tested up to WordPress 6.5.14, 6 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
ayeshrajans6 Jan 2017 to 10 Jun 2024, 56 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
2 years ago
Releases, 24 months
0
Tested up to
6.5 vs 7.1
Requires PHP
7.0 supported 8.2+
Releases per quarter for PHP Native Password Hash
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 10 Jun 2024. Tested up to 6.5, 6 major versions behind WordPress 7.1.

Support

Support history appears after our first snapshots of the forum counts.

Security record

No published vulnerabilities on record for this plugin.

Source: Wordfence Intelligence.

Reputation

Lifetime rating 5.0 from 6 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star6
4 star0
3 star0
2 star0
1 star0

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for PHP Native Password Hash
4 May 202617
11 May 202635
18 May 2026112
25 May 2026107
1 Jun 202646
8 Jun 202660
15 Jun 202645
22 Jun 202639
29 Jun 202650
6 Jul 202653
13 Jul 202634
20 Jul 202651
27 Jul 202666
3 Aug 202674
10 Aug 202678
17 Aug 202661
24 Aug 202647
31 Aug 202662
7 Sep 202664
14 Sep 202686
21 Sep 202692
28 Sep 202683
5 Oct 2026109
12 Oct 202687
19 Oct 2026106
26 Oct 202699
2 Nov 202626

Weekly downloads over the last 4 weeks are 20% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

LoginizerScore 93 · 1,000,000+FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social LoginScore 93 · 10,000+All In One LoginScore 92 · 60,000+WPS Hide LoginScore 91 · 2,000,000+Temporary Login Without PasswordScore 91 · 90,000+

Facts

Version3.0
AuthorAyesh Karunaratne
Added4 Jan 2017
Last updated10 Jun 2024
Active installs1,000+
Requires WordPress5.2
Tested up to6.5.14
Requires PHP7.0
CategorySecurity & Privacy > Security Scanning & Malware Protection
Tagsargon2, bcrypt, password, password_hash, password hashing

Other plugins by this author: oEmbed Plus, SameSite Cookies, Comment Form CSRF Protection, Fast 404, Clear Logout, Hatton National Bank Payment Gateway for WooCommerce

Questions

Is PHP Native Password Hash still maintained?

PHP Native Password Hash was last updated on 10 Jun 2024. Its Canary status is At risk.

Is PHP Native Password Hash safe?

PHP Native Password Hash has no open unpatched vulnerabilities on record. 0 vulnerabilities were published in the last 24 months. Its Canary status is At risk.

Who owns PHP Native Password Hash?

The wordpress.org author is Ayesh Karunaratne. Recent committers: ayeshrajans, plugin-master. We have recorded no ownership change.

What can I use instead of PHP Native Password Hash?

Plugins in the same category with a higher Canary Score: Loginizer, FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social Login, All In One Login, WPS Hide Login, Temporary Login Without Password.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue