# How to Strengthen WordPress Password Encryption

URL: https://wpusermanager.com/article/264-how-to-strengthen-wordpress-password-encryption/
Last updated: 2021-01-23

WordPress encrypts user passwords with the insecure MD5-based password hashing. To improve this WP User Manager can use the modern and secure [bcrypt](https://en.wikipedia.org/wiki/Bcrypt).

To do this, you need to have the [Security addon](https://wpusermanager.com/addons/security/) installed and your site running on PHP 5.5 or greater.

- Navigate to User > Settings
- Click the Security tab
- Turn on the 'Use more secure password encryption'

The encryption is backwards with passwords created before the setting was enabled and if it is disabled.