Migrate to new postgreSQL how to pass passwords

Using Django
1

Hello,

I am about to move a django website to a new server with an entire new struture from front end to back end and DB tables structure. I did solved anything, but I stil have one issue about moving hashed passwords.

I dumped data from the admin.user table of the old database and i am about to save thoose in the new database.

But the password are hashed and they all start by “pbkdf2_sha…”

What is the right method to save the hashed passwords in the new admin.user table?

Please note that by bad work of the previous developer it is impossibile to me to perform “loaddata”

So i must perform this task with a manual file load of the dumped data in .json format.

When I do the following:

user = User()
user.set_password(‘clear_password’) # → this method does hash the password

What else I can do to save the password which is already hashed?

something like this?

user.password = hashed_password

I feel it’s wrong, so I need your help

Many thanks

2

You are on the correct path.

Using user.set_password() on an already hashed password would hash it again and it wouldn’t work.

Your idea is correct, setting user.password = hashed_password will work just fine. It’s only important that the field has the hash of the clear password that Django will later check using check_password().

So yes, setting the hash directly to the field should work normally.