Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Is it possible to migrate passwords from Wordpress users hashed with the _phpass_ lib? I see you support a couple of algos but I do not find anything that works for this ancient phpass.
If I’m able to solve this, I am considering to publish the scripts and custom WP auth plugin at Github.

You can find a list of supported hashes here: <https://www.ory.sh/docs/kratos/manage-identities/import-user-accounts-identities#hashed-passwords>

WP does MD5 with 8 iteration <https://github.com/WordPress/wordpress-develop/blob/6.3/src/wp-includes/class-phpass.php#L152>

you support salted md5 but only one iteration. any chance to get support for WP like hashing in Ory?

As side note: We need to migrate more than 20k users and fear a lot of Passwort related issues when using the password reset via email.

I’m not sure if we support that. But you can now also offer “login via code to email” where the user sees the login screen, enters the email, gets a code to their email, and proceeds to log in thereafter. Maybe that’s a good migration strategy?

Ok, I will experiment with that. Can you post me the documentation link?