• I have an issue with logins on our site.

    Customer are not managing to log in. Even if I go into the user settings and do them a new password and then try it it doesn’t work.

    I have logged into phpMyAdmin, and the passwords are showing as unencrypted, if I open a user, and change the user_pass function to MD5, it hashes the password and I can then log in fine.

    I would like to fix it so that customers can log in, if i change a password in wordpress it changes and works.

    How can I fix this please?

Viewing 1 replies (of 1 total)
  • Moderator bcworkz

    (@bcworkz)

    Really? Saved as plain text? That’s not good! That has to be the result of a plugin or theme you’re using. WP normally always hashes submitted passwords. FWIW, it’s not really a MD5 hash, but WP will recognize such hashes and convert them to the proper kind of hash.

    Are you able to replicate customer experience so you can verify a successful fix? Hopefully so, or narrowing down the cause will be difficult. Start by deactivating all plugins and switching to twenty twenty-one theme. Reset passwords should now be properly hashed. Restore your theme and plugins, one at a time and testing after each, to identify the cause.

    While it’s possible to take the plain text and hash passwords for customers, to protect their privacy they should reset their own passwords.

Viewing 1 replies (of 1 total)

The topic ‘Issues with users loggin in, MD5/hash’ is closed to new replies.