Password versioning

[timnashcouk]

While the "upgrade" from PHPass to the native Password hasher is seamless, migrating from algorithms are not. Currently the only way for someone to move from Argon from Bcrypt is to reset the password.

There is no mechanism to "upgrade" or "downgrade". I'm not sure if I actually think that is in scope, knowing what Hashing algorithm used probably does make sense.

[timnashcouk]

With WordPress core using Bcrypt in 6.8 the plugin needs a way to migrate users to the defaults as such having a versioning is important to manage the rehash so its seamless.

reference:
https://make.wordpress.org/core/2025/02/17/wordpress-6-8-will-use-bcrypt-for-password-hashing/