# Sunsetting wp-password-bcrypt with WordPress 6.8

**URL:** https://discourse.roots.io/t/sunsetting-wp-password-bcrypt-with-wordpress-6-8/29282
**Category:** bedrock
**Created:** 2025-02-20T15:44:17Z
**Posts:** 3

## Post 1 by @ben — 2025-02-20T15:44:17Z

WordPress 6.8 is introducing bcrypt as the default password hashing method, making our `wp-password-bcrypt` package redundant. If your site is running WordPress 6.8 or later, you no longer need the package—WordPress core now handles bcrypt authentication natively, with no migration required.

We’ve published a blog post outlining the details, including what this means for Bedrock and our plans to archive the repository:

[**Sunsetting wp-password-bcrypt with WordPress 6.8**](https://roots.io/sunsetting-wp-password-bcrypt-with-wordpress-6-8/)

Let us know if you have any questions!

---

## Post 2 by @ben — 2025-03-02T17:21:24Z



---

## Post 3 by @ben — 2025-04-16T14:52:12Z

:white_check_mark:

[WP 6.8 has been released](https://wordpress.org/news/2025/04/cecil/) and this package has been archived. If you continue to use wp-password-bcrypt, you might come across the following message:

> Package roots/wp-password-bcrypt is abandoned, you should avoid using it.

You can continue to use the package without issues — read the post about [sunsetting wp-password-bcrypt](https://roots.io/sunsetting-wp-password-bcrypt-with-wordpress-6-8/) for more information