# Importer support for migrated passwords

**URL:** <https://meta.discourse.org/t/importer-support-for-migrated-passwords/70543>\
**Category:** Development\
**Created:** [2017 年 9 月 21 日午後 11:05 UTC](https://meta.discourse.org/t/importer-support-for-migrated-passwords/70543 "2017-09-21T23:05:02Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)\
**Post date:** [2017 年 9 月 21 日午後 11:05 UTC](https://meta.discourse.org/t/importer-support-for-migrated-passwords/70543/1 "2017-09-21T23:05:02Z")

</div>

I mostly think that importing passwords from a legacy forum is a Bad Idea. There are almost certainly a bunch of horrible passwords and it seems like making people change their password when they get a shiny new forum is a fine idea, but it seems that people want to do that anyway.

There’s a plugin that offers [Migrated password hashes support](https://meta.discourse.org/t/migrated-password-hashes-support/19512). I just put that code into the `vbulletin` importer for some folks. Should I leave it in or take it out before I submit the PR with other useful stuff in it?

Since the passwords are completely ignored unless the plugin is installed, it doesn’t hurt much to just include the passwords, but I’d probably add a switch so that they’d not be included by default.

---

_[View the full topic](https://meta.discourse.org/t/importer-support-for-migrated-passwords/70543)._