The Password Compatibility → module was added in Drupal 10.1.0. When sites are upgraded from older versions of Drupal, the module should be installed automatically, and it allows users to log in with their existing passwords. Once a password has been used with the Password Compatibility module, that password can be used in the future whether or not the module is installed.
Site administrators need some guidance to decide when to uninstall the module.
Provide information about how many passwords have not been used since the site was upgraded to Drupal 10.1.0 or later.
There is already a contrib module, Password Stats → , that provides this information. We can borrow some of its code and add it to the core Password Compatibility module.
Show additional information
None
None
N/A
Active
10.1 ✨
Last updated
This is somewhat of a duplicate of 📌 Notify users that they need to reset their password when it matches an unsupported hash type Active but there's one part of the issue summary that's not covered here, so I slightly repurposed that issue.