# Update Password Encryption Method

**URL:** https://meta.discourse.org/t/update-password-encryption-method/316314
**Category:** Development
**Created:** [July 15, 2024, 11:54am UTC](https://meta.discourse.org/t/update-password-encryption-method/316314 "2024-07-15T11:54:35Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![selase](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/selase/32/270909_2.png) [@selase](https://meta.discourse.org/u/selase)
#### Post date: [July 15, 2024, 1:03pm UTC](https://meta.discourse.org/t/update-password-encryption-method/316314/2 "2024-07-15T13:03:15Z")

</div>

> [@gambhir-makwana](#):
>
> Update password encryption method. Currently, Discourse uses “PBKDF2” for password encryption.  
> As per my requirement, I need to switch to “MD5” instead of “PBKDF2”.

This appears to be a significant security downgrade. MD5 is unsuitable for password hashing. Not only would this change affect a critical part of Discourse, but you would also need to maintain it for all future releases.

Perhaps we can suggest a better approach if you could explain what you’re trying to achieve.

Regarding customizing Discourse, please take a look at [Developing Discourse Plugins - Part 1 - Create a basic plugin](https://meta.discourse.org/t/developing-discourse-plugins-part-1-create-a-basic-plugin/30515). The plugin system allows you to safely extend core features.

---

_[View the full topic](https://meta.discourse.org/t/update-password-encryption-method/316314)._