Amazon Cognito now supports importing users with password hashes
Share
Services
Amazon Cognito now supports importing users with password hashes in CSV user imports. Previously, users imported from a CSV file had to reset their passwords on first sign-in. Now, you can include password hashes in your CSV file so that imported users can sign in immediately with their existing credentials.
When creating a CSV import, you specify the password hashing algorithm used by your source system. Amazon Cognito imports these users and verifies their password against the imported hash on first sign-in. Supported algorithms include bcrypt, scrypt, Argon2id, and PBKDF2 with SHA-256\. All imported hashes receive an additional layer of cryptographic protection before storage.
Password hash import is available in all AWS Regions where Amazon Cognito is available. To get started, create a user import using the [AWS Management Console](https://console.aws.amazon.com/cognito/home), AWS Command Line Interface (CLI), or AWS Software Development Kits (SDKs). See the [developer guide](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-using-import-tool.html) for instructions.
What else is happening at Amazon Web Services?
Amazon RDS for PostgreSQL supports minor versions 18.6, 17.11, 16.15, 15.19, and 14.24
about 7 hours ago
Services
Share
IAM Roles Anywhere now provides a Java plugin for the AWS SDK
about 10 hours ago
Services
Share
AWS Lambda introduces managed runtimes in public preview for Node.js 26 and Python 3.15
about 10 hours ago
Services
Share
AWS Secrets Manager adds managed external secrets support for Cisco Security Platform and Netskope
about 16 hours ago
Services
Share
AWS Lambda functions now support full IAM resource-based policies
about 21 hours ago
Services
Share