How to disable automatic password migration?

PHPMaker General Discussion (PHPMaker)
1

Hello,

I have a project generated with PHPMaker 2026 using a database user table for authentication.

The existing passwords in the user table are not hashed.

When a user logs in successfully for the first time, PHPMaker 2026 automatically changes the password value in the database to a bcrypt hash, for example:

Before login:
MyPassword

After successful login:
$2y$13$...

The user did not change their password. The password field is being updated automatically during the login process.

In Advanced Settings, I currently have:

Password migration cutoff date: [empty]
Password algorithm: bcrypt
Password cost: 13

I need PHPMaker 2026 to authenticate users using the existing password values without modifying or updating the password field after successful login.

My questions are:

  1. How can I disable this automatic password update/migration in PHPMaker 2026?

  2. What exactly does Password migration cutoff date control?

  3. Can this setting be used to prevent existing passwords from being automatically converted to bcrypt?

  4. Is there a PHPMaker 2026 setting that allows successful login while leaving the existing password value unchanged?

I do not want to change the password algorithm. I only want to prevent PHPMaker 2026 from automatically updating the password field after login.

Thanks.

2

Password migration is now mandatory for security, see Migrating to v2026 -> Password Migration. As it explains:

To phase out insecure or outdated hashes in a controlled and predictable way, it is recommended to set a fixed Password migration cutoff date in the advanced settings. After this date, legacy passwords will no longer be accepted, ensuring that weak hashes and plain passwords are phased out in favor of secure algorithms.