---
title: "Deprecation: #94309 - GeneralUtility::stdAuthCode"
manual: "TYPO3 Core Changelog"
version: "main"
permalink: "https://docs.typo3.org/permalink/changelog:deprecation-94309"
source: "Changelog/11.3/Deprecation-94309-DeprecatedGeneralUtilitystdAuthCode.rst"
modified: "2026-09-15T10:46:36+00:00"
---

# Deprecation: #94309 - GeneralUtility::stdAuthCode

See [forge#94309](https://forge.typo3.org/issues/94309)

## Description

The method `\TYPO3\CMS\Core\Utility\GeneralUtility::stdAuthCode()`
has not been used within the Core since at least v9. It internally fiddles
with the `encryptionKey` while using `md5()`. Furthermore, the default
length of 8 chars could easily lead to hash collisions. The TYPO3 Core already
provides `\TYPO3\CMS\Core\Utility\GeneralUtility::hmac()` for such
purposes, which is using `sha1` with a length of 40. Therefore,
`stdAuthCode()` has been deprecated and will be removed in TYPO3 v12.

## Impact

Calling the method will trigger a PHP `E_USER_DEPRECATED` error.

## Affected Installations

All TYPO3 installations calling this method in custom code. The extension
scanner will find all usages as strong match.

## Migration

Replace all usages of the method in custom extension code by either using
`\TYPO3\CMS\Core\Utility\GeneralUtility::hmac()` or by a custom
implementation.