resetlegacypasswords

Overview ¶

Command resetlegacypasswords removes the old site's unsalted SHA-512 password digests and emails each affected user a link to set a new password. Run it once against production; running it again does nothing.

It needs the same database, Redis, mail and DOMAIN_NAME settings as the server. Redis is required: reset links must be stored where the server can find them, and without Redis each process keeps its own.