The security check for stores before OXID 7.5.
Make insecure password hashes visible
Old customer accounts sometimes still carry passwords secured with long-outdated schemes – a risk if the data ever gets out. The OPAL finds exactly these accounts and gives them to you as a list, without changing anything. That way you can decide calmly what should happen with them.
Technically: OXID stores that have grown over the years often still contain MD5 password hashes. The core only rehashes on login – inactive old accounts keep their insecure hashes and are not flagged by any check. The OPAL exports exactly these accounts read-only as CSV.
What the OPAL solves for you
Finds accounts with outdated or insecure password schemes – such as MD5, SHA-512 or no password at all.
Exports the affected accounts read-only as CSV – with clear feedback on how many were found.
Read-only: changes no passwords or accounts, no migration – just transparency as a basis for decisions.
Part of the OPAL family
OPALs are building blocks from OXID eSales: a proven, solid foundation that needs to be adapted to your system landscape and integrated into your store.
Features at a glance
OXID
<OPAL/>
Closes the gap until OXID 7.5
From OXID 7.5, OXID eShop comes with its own Consistency Check. For stores on 6.5 to 7.4, this OPAL delivers exactly this check ahead of time – as a building block directly from the platform vendor.
Finds insecure password schemes
Checks all customer accounts and flags those whose password is stored with an outdated or insecure scheme – such as MD5, SHA-512 or no password at all.
Read-only – changes nothing
The check only reads and writes nothing: no passwords, no account status, no migration. No risk to your data.
CSV report as a basis for decisions
Outputs the affected accounts as CSV – with the detected password status and the key details per account (including whether it is active and when the last order was placed).
Clear feedback
After the run, you immediately see how many accounts are affected – or that nothing was found.
Extensible
In addition to the check for insecure passwords, further checks can be added without touching the existing code.
Who is the OPAL for?
Shop operator / system administrator
Your OXID store has been running for years, and you want to know how many customer accounts still use insecure password schemes.
What the OPAL delivers here
A single call exports all affected accounts read-only as CSV – with status and the key details per account. You get transparency about your customer base without changing anything, and have a solid basis for the next steps.
Frequently asked questions
Price
€5/month
OPALs are also available in subscription packages.