PHP Password
This module enhances Drupal's password security by replacing the default hashing algorithm with a more modern and secure method provided by PHP. It also includes forward compatibility for newer Drupal versions by implementing Argon2 as the default hashing algorithm.
Which version should I use?
3.x - The 3.x version provides a forward compatibility layer for sites running Drupal core > 10.1 and < 11.3. If you are running Drupal core 11.3 or greater, this module is not required. It forward ports the functionality of #3530186: Switch to argon2 as the default password hashing algorithm.
1.x, 2.x - The 1.x and 2.x versions replace Drupal's in PHP hashing algorithm with php's native password hashing. This functionality was added to Drupal core in 10.1.0. The module is based on work from the core issue queue #1845004: Replace custom password hashing library with PHP password_hash(). If you are running Drupal core 10.1 or greater, the 1.x and 2.x versions are not required.
Installation
The php_password module will take care of replacing the relevant password services provided by Drupal core.
Installation is as simple as installing any other Drupal module.
Configuration (3.x)
This module doesn't have a lot of configuration needed out of the box. However
you should as a minimum create a services.yml file to configure the password algorithm to use. You may also wish to tweak some of the parameters used to hash new passwords. See The README for more information.