---
title: "Deprecation: #85796 - Salted passwords cleanups"
manual: "TYPO3 Core Changelog"
version: "main"
permalink: "https://docs.typo3.org/permalink/changelog:deprecation-85796"
source: "Changelog/9.4/Deprecation-85796-SaltedPasswordsCleanups.rst"
typo3-version: "9.4"
typo3-major: 9
type: "deprecation"
issue: 85796
forge: "https://forge.typo3.org/issues/85796"
tags: ["PHP-API", "FullyScanned", "ext:saltedpasswords"]
rendered: "2026-09-20T18:31:11+00:00"
---

# Deprecation: #85796 - Salted passwords cleanups {#deprecation-85796}

See [forge#85796](https://forge.typo3.org/issues/85796)

## Description {#description}

These methods have been marked as deprecated:

-   **`TYPO3\CMS\Saltedpasswords\Salt\SaltFactory::getSaltingInstance()`**

    Use `SaltFactory->get()` to retrieve a hash instance of for a given password hash.
    Use `SaltFactory->getDefaultHashInstance()` to retrieve an instance of the configured default hash algorithm
    for a given context. See the method comments for usage details.

-   **`TYPO3\CMS\Saltedpasswords\Salt\SaltFactory::determineSaltingHashingMethod()`**

    Use `SaltFactory->getDefaultHashInstance()` instead.

-   **`TYPO3\CMS\Saltedpasswords\Salt\SaltFactory::setPreferredHashingMethod()`**

    This method was only used for unit testing and has been marked as deprecated without substitution since
    object instances of `SaltFactory` can  now be properly mocked.
    Use `Prophecy` to do that in unit tests that have `SaltFactory` as dependency.

-   **`TYPO3\CMS\Saltedpasswords\Utility\SaltedPasswordsUtility->getNumberOfBackendUsersWithInsecurePassword()`**

    This internal method is unused and there is no new implementation to substitute it.

## Impact {#impact}

Calling one of the above methods will trigger a PHP `E_USER_DEPRECATED` error and a fatal PHP error in TYPO3 v10.

## Affected Installations {#affected-installations}

Most instances are not affected by this change if they don't have custom authentication
services loaded that add magic with stored local password hashes, and if they don't use
the `SaltFactory` in own extension which is a seldom use case.

The extension scanner will find usages in extensions.

## Migration {#migration}

Use the new factory methods as outlined in the description section.