Blesta uses Bcrypt because it's way more securer than MD5, which can be cracked faster than anything and Blesta is based on Security in mind. You can find out more why Bcrypt is better by reading this nice article all about why it's better than MD5 hashes which most of the low quality software uses: http://codahale.com/how-to-safely-store-a-password/