Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I am migrating my website from magento to wordpress-shopp site and i have to sync all the products, orders, customers. I did manage to sync all this and I am trying to keep same password of my customers and for that I want to know what type of password is this "10d32f6e654e8a54062325962f7419d5:45" is it MD5 or MD4 or any other format.

share|improve this question

closed as primarily opinion-based by Dave Rook, Ƭᴇcʜιᴇ007, Tog, AthomSfere, Dave M Aug 28 '13 at 17:12

Many good questions generate some degree of opinion based on expert experience, but answers to this question will tend to be almost entirely based on opinions, rather than facts, references, or specific expertise.If this question can be reworded to fit the rules in the help center, please edit the question.

1  
Or maybe both of them?! md5(md4(password)); –  Sepahrad Salour Aug 27 '13 at 10:41
    
Or neither of them or something else! As far as we can see it's just a string of what appears to be random characters. –  Dave Rook Aug 27 '13 at 10:45
1  
@Keyur - Look at the source code for Magento and modify the Wordpress code to use the same hashing mechanic. I suggest you force a password change on your users, md5 hashing, is not proper for storing password. If your database was compromised it would be trivial to determine your user's password ( ar at least the string that generated the same hash ). –  Ramhound Aug 27 '13 at 10:46
    
@Ramhound Even though MD5 has been unacceptable for passwords since years now, it's still commonly used. It's not unlikely to find MD5-hashed passwords these days—or even plaintext passwords, unfortunately. –  slhck Aug 27 '13 at 10:49
    
@slhck - Which is the reason I suggested the author allows Wordpress to use the better password hashing mechanic instead of using Megento's md5 + salt password hashing mechanic. –  Ramhound Aug 27 '13 at 10:59
add comment

1 Answer 1

up vote 6 down vote accepted

Magento uses MD5 hashes, which are salted and stored in the database as a combination of:

hash:salt

So in your case, 10d32f6e654e8a54062325962f7419d5 is the hash and 45 is the salt.

Reference: How are passwords encrypted in Magento | MagentoGarden Blog

share|improve this answer
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.