Moving Customer Accounts to Shopify Without Transferring Passwords
You can’t migrate customer passwords to Shopify. Platforms store passwords as encrypted hashes that can’t be read or converted, and Shopify doesn’t import them, so migration tools move customer names, emails, addresses and order history but leave passwords behind. Customers regain access either by signing in with a one-time email code through Shopify’s customer accounts or by activating their account and setting a new password.
That sounds worse than it is. With the right sign-in setup and a clear message to customers, most returning shoppers can get back into their accounts in a minute and still see their past orders.
Why Customer Passwords Can’t Be Migrated to Shopify
Ecommerce platforms don’t store passwords in readable form. They save an encrypted version, and each platform does this differently, so a password saved by Magento, WooCommerce or another system can’t simply be loaded into Shopify and still work.
Shopify also doesn’t support importing sensitive information such as passwords. Migration services like Cart2Cart state plainly that they don’t transfer customer passwords, and describe this as a security safeguard rather than a gap in their tools.
The rest of each customer record does move. Names, email addresses, phone numbers, addresses, order history and, with the right tool, custom fields carry over, so customers keep their history once they’re back in their accounts.
How Customers Get Back Into Their Accounts
What customers need to do depends on which type of customer account your Shopify store uses. The difference is significant enough that it should shape your whole plan:
| Option | How customers sign in | What customers need to do after migration | Best for |
|---|---|---|---|
| Customer accounts (current version) | Email address plus a 6-digit one-time code, or Shop and social sign-in where enabled | Nothing beyond signing in with the email they used before | Most stores |
| Legacy customer accounts | Email address and password | Accept an account invite or reset their password | Existing stores that haven’t upgraded yet |
| Custom identity provider or Multipass | Your own login system or an external site | Sign in through the existing login you control | Shopify Plus stores with their own authentication |
Customer accounts: no passwords to migrate
Shopify’s current customer accounts are passwordless. A customer enters their email address and receives a one-time code, so there’s no password to set, reset or migrate.
Imported customer profiles already have an account that’s reached through the profile’s email address. When a returning customer signs in with the same email they used on your old store, they’ll find their profile and imported order history waiting, without any activation step.
This makes the password problem largely disappear. Shopify lists legacy customer accounts as deprecated, so the current version is the one most migrating stores should plan around.
Legacy customer accounts: invites and password resets
Legacy customer accounts use passwords, so imported customers start without one and need to activate their accounts. Shopify can send an account invite to a customer, which lets them set a new password, and customers can also use the password reset link on the sign-in page.
Sending invites one by one isn’t practical for a large customer list. Bulk invite apps, such as Bulk Account Invite Sender, can send invites to many customers at once, and developers can use Shopify’s API to send invites or generate one-time activation links for their own emails.
Because legacy accounts are deprecated, it’s usually worth upgrading to the current customer accounts before or soon after a migration. That spares customers a password reset now and another change to how they sign in later.
Shopify Plus: Multipass and custom identity providers
Shopify Plus stores have two more options. A custom identity provider can replace Shopify’s default sign-in, and Multipass lets customers who are signed in to another website you run move to your Shopify store without signing in again.
These suit businesses that keep customer logins in a separate system, such as a membership site or a company-wide account. They need development work, so they’re rarely worth adopting only to avoid a one-time password reset.
How to Handle Passwords During a Migration
Password handling is mostly about timing and communication, since the data migration itself skips passwords. Plan it alongside your customer import:
- Choose your customer account type. Decide whether you’ll use the current passwordless customer accounts, which spare customers a reset, or legacy accounts with passwords.
- Import customers with clean emails. Migrate customers before orders, and check that email addresses are accurate, since the email is how customers reach their accounts.
- Set up and test sign-in. Brand the sign-in page, verify your sender email address and test signing in as an imported customer.
- Tell customers before launch. Announce the move and explain how sign-in will work on the new store.
- Send invites if you need them. For legacy accounts, send account invites at launch, in batches if your list is large.
- Redirect old account pages. Point your old login and account URLs to your Shopify sign-in page so bookmarked links still work.
- Support customers after launch. Prepare help-desk answers about signing in and watch for customers who can’t get access.
Some teams avoid mass emails altogether. One approach a migration agency describes uses custom development to detect returning customers when they first try to sign in and send each one a password reset link at that moment, which feels like a routine reset rather than a store-wide announcement.
Tell Customers What’s Changing
A clear message stops customers from worrying that their account has been lost or hacked. An unexpected email asking everyone to reset their password can look like a security breach, so explain the reason and keep the tone matter-of-fact.
- Say what’s happening. Let customers know your store has moved to a new platform and their order history is still there.
- Explain how to sign in. With passwordless accounts, tell them to enter their email and use the code you send; with legacy accounts, tell them to accept the invite or reset their password.
- Use several channels. Combine email with a notice on your site, especially near the sign-in page, and mention it on social media if you use it.
- Warn about phishing. Tell customers you’ll never ask for their old password and that sign-in links come only from your store’s email address.
- Offer help. Give an easy way to contact support if a customer can’t get in.
Common Password Migration Problems
Most sign-in problems after a migration come from email mismatches or customers missing the message. Watch for these after launch:
- Customers using a different email. A customer who signs in with a new email gets a new, empty profile instead of their imported history, and merging profiles is done by the merchant in the admin.
- Invites going to spam. Bulk invites or one-time codes can land in junk folders, especially if your sender email address isn’t verified.
- Expired activation links. One-time activation links generated through Shopify’s API expire after 30 days, so customers who wait too long need a new one.
- Broken custom sign-in. A custom login form or pop-up in your theme may need edits before switching to the current customer accounts.
- Lost saved payment details. Customers may need to re-enter some billing details, since sensitive data doesn’t move with the customer record.
Conclusion
Since you can’t migrate passwords to Shopify, the real task is choosing how customers will sign in and making that step easy. Passwordless customer accounts remove the reset altogether, while legacy accounts rely on invites and clear communication. We hope this guide helps you handle customer passwords smoothly when you migrate to Shopify.
