I forgot to save my password and am unable to get MAMP Pro's postfix working so I can't resend the password to myself from my local machine, unfortunately.

What is the MySQL function used to generate the encrypted string in the exp_members password column?

Is it either MD5 or SHA1 or a combination of something else all together?


As far as I know ExpressionEngine will use one or the other, SHA1 or MD5 (I believe SHA1 is the default). In my test it actually worked to use either one when replacing the password, allowing me to login just fine in both cases.

You can use MySQL to generate a new password hash for yourself. For example either SELECT SHA1('pass123') or SELECT MD5('pass123') will generate a string for you.

The following MySQL query would set your new password to "pass123" (where your member_id is 1):

UPDATE exp_members
SET password = SHA1('pass123')
WHERE member_id = 1

Or if you don't want to use MySQL then this online SHA1 hash generator or MD5 hash generator tool also works. Just copy the string and then using PHPMyAdmin, Sequel Pro, or similar, find your user record in the exp_members table and replace your current password with the new string .

  • Assuming this works as long as you don't have salt. – David Sopko Jan 4 at 21:52

Why not just use the password reset / forgot password function. It's generally accessible at


Where {domain} is your domain name, and {member_trigger} is whatever term you set to trigger member registration and login. Default is 'member' but I believe you're encourage to set it to something else.

  • Thanks for the reply! Please note my first paragraph which states I'm not able to send email. Your answer assumes email in working properly. – Natetronn Jan 6 '13 at 3:27
  • Yep! Missed that. Sorry. – nonprofit_tech Jan 6 '13 at 7:29

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.