We are planning to migrate users from another CMS to Drupal. We can migrate usernames, but not passwords as the encryption is different. So we shall have to assign passwords to them. Earlier versions of Drupal had the ability to force a password change at first logon, but Drupal 9 seems to have lost it? What am I missing? People have answered the question before, but, as I said, not for Drupal 9.

  • Drupal 8, 9 already supported old encryption, so you don't need require change password. You can follow document. I checked, still working with drupal 9.
    – MrD
    Jan 20, 2021 at 3:29
  • Thanks - I looked at the document. It mentions crypt, phpcache and Blowfish algorithms. It looks as though our implementation is using Blowfish, but simply copying the hash to Drupal doesn't work. Any suggestions. In any case, if you set up a new user or reset a password for a user, you want to force a password change, don't you, and Drupal 9 doesn't seem to do so? Jan 20, 2021 at 12:41
  • Document mentions create a module provide a custom password service too. So you have to create a custom module to check old hash password.
    – MrD
    Jan 20, 2021 at 14:14
  • A example I convert from old password use md5 drupal.stackexchange.com/questions/299508/…
    – MrD
    Jan 20, 2021 at 14:24
  • I found that running composer require drupal/php_password:1.2.0 enabling PHP Password and restarting the site seemed to do the job. It still doesn't answer the question about forcing password changes for new users. Jan 20, 2021 at 16:32


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.