Initial version:

Seems some hack issue suddenly my frontend customers were not able to login with correct password. I did change password from admin for user and tried to login, even that did not worked.

I also changed password in db put md5 value and tried it did not worked too.

Then I updated magento to, but still found same issue. I tried reindex, cleared cache.

Can you please tell steps to fix this?


2 Answers 2


it is known issue after hack you might be in some cases form_key is not there

just open your phtml file and check for the form_key and if it is not there then add below line

<input name="form_key" type="hidden" value="<?php echo Mage::getSingleton('core/session')->getFormKey() ?>" />
  • it is there ,i there something like hash to check password changed ?
    – gaurav
    Commented Sep 14, 2016 at 11:31

As you mentioned, the first fix to try is resetting the customer's password within the admin: Customers>Manage Customers, Account Information>Send Auto-Generated Password, Save.

If that does not work, I would try the n98-magerun application. Install per the instructions in the readme. There is an interactive command for this situation:

n98-magerun.phar customer:change-password

Not the answer you're looking for? Browse other questions tagged or ask your own question.