The security check for stores running versions before OXID 7.5.
Make insecure password hashes visible
Old customer accounts sometimes still have passwords secured with long-outdated schemes – a risk if the data is ever leaked. This OPAL finds exactly these accounts and gives them to you as a list, without changing anything. That way, you can decide what to do with them at your own pace.
Technical background: OXID stores that have grown over the years often still contain MD5 password hashes. The core only rehashes passwords at login – inactive legacy accounts keep their insecure hashes and are not caught by any check. This OPAL exports exactly these accounts read-only as CSV.
What this OPAL does for you
Finds accounts with outdated or insecure password schemes – such as MD5, SHA-512 or no password at all.
Exports the affected accounts read-only as CSV – with clear feedback on how many were found.
Read-only: no changes to passwords or accounts, no migration – just transparency as a basis for decisions.
Part of the OPAL family
OPALs are building blocks from OXID eSales: a proven foundation that is adapted to your IT landscape and integrated into your store.
Features at a glance
OXID
<OPAL/>
Bridges the gap until OXID 7.5
From OXID 7.5, OXID eShop comes with its own Consistency Check. For stores on 6.5 to 7.4, this OPAL provides exactly this check today – as a building block direct from the platform vendor.
Finds insecure password schemes
Checks all customer accounts and flags those whose password is stored with an outdated or insecure scheme – such as MD5, SHA-512 or no password at all.
Read-only – changes nothing
The check only reads data and never writes anything: no passwords, no account status, no migration. No risk to your data.
CSV report as a basis for decisions
Outputs the affected accounts as CSV – with the detected password status and the key details per account (including whether it is active and when the last order was placed).
Clear feedback
After the run, you immediately see how many accounts are affected – or that nothing was found.
Extensible
In addition to the check for insecure passwords, further checks can be added without touching the existing code.
Who is this OPAL for?
Store owner / system administrator
Your OXID store has been running for years, and you want to know how many customer accounts still use insecure password schemes.
How it helps
A single command exports all affected accounts read-only as CSV – with status and the key details per account. You get transparency about your customer base without changing anything, and a solid basis for your next steps.
Frequently asked questions
Price
€5/month
OPALs are also available in subscription packages.