Issue #3305807 by andypost, ChrisPerko, mediabounds, xjm, sorlov, Rishabh Vishwakarma, ilya.no, asad_ahmed, paulocs, Michelle, _pratik_, reenaraghavan, DanChadwick, smustgrave, larowlan, allisonherodevs: Password is null if user has never logged in which causes PHP 8 warning

Issue #1845004 by znerol, claudiu.cristea, Spokje, neclimdul, VladimirAus, slasher13, tvb, pwolanin, NivethaSubramaniyan, pradhumanjainOSL, Ratan Priya, longwave, catch, Crell, andypost, xjm, dawehner, voleger, alexpott, Berdir, klausi, DamienMcKenna, mfb, borisson_, Jalandhar, mohit1604, mcdruid: Replace custom password hashing library with PHP password_hash()

Issue #3296293 by andypost, amjad1233, mfb, smustgrave, _utsavsharma, jordanpagewhite, longwave, geek-merlin: Apply SensitiveParameter attribute

Issue #2665992 by alexpott, klausi, heykarthikwithu, xjm, tstoeckler: @file is not required for classes, interfaces and traits

Issue #2503083 by pwolanin, neclimdul: Simplify PasswordInterface so it's not coupled to UserInterface