Automatic Customer Password: setup and help
Quick start
- Upload the module ZIP in Modules > Module Manager and open Configure.
- In General, enable Enable Automatic Password and select Apply To.
- Choose Password Field Behavior; optional shows an editable, pre-filled field.
- Select Email Mode for password, setup-link or silent handling.
- In Strength Rules, set Password Length and the character switches, then save.
- Create a test account and check the selected email flow and subsequent login.
- Test existing-customer login and identity forms on the selected pages before completing setup.
Requires PrestaShop 1.6 or later and PHP 7.1 or later.
Setup manual
Install and configure
- Upload the Automatic Customer Password ZIP in Modules > Module Manager.
- Open Configure > General.
- Set Apply To to the account flow you want to test.
- Choose Password Field Behavior and Email Mode.
- Review Strength Rules and save.
- Create a test account, check its email and verify that you can sign in.
Requires PrestaShop 1.6 or later and PHP 7.1 or later.
General settings
| Setting | Installed default | What it does |
|---|---|---|
| Enable Automatic Password | Yes | Generates passwords on selected pages and handles new-account email for registrations using the module. |
| Apply To | Registration & Checkout (both) |
Choose Registration page only (registration) or Checkout only (checkout) to limit where it runs. |
| Password Field Behavior | Hidden (hidden) |
Hides the password field. The optional choice shows a pre-filled field that customers can edit; matching confirmation fields follow their changes. |
| Email Mode | Send password via email (send_password) |
Emails the submitted password. setup_link sends a password setup link. silent sends no password-specific email from this module. |
Registration targeting includes authentication, registration and identity. Checkout targeting includes order, orderopc and order-opc.
Only detected account-creation forms are filled on the selected pages. Existing-customer login and account identity forms are excluded. In optional mode, existing field values are preserved. New-account emails are sent only after registration through a form marked by the module.
Strength Rules
| Setting | Installed default | What it does |
|---|---|---|
| Password Length | 12 | Generated passwords are limited to 8 to 64 characters. |
| Include Uppercase Letters | Yes | Includes at least one uppercase letter. |
| Include Numbers | Yes | Includes at least one digit. |
| Include Special Characters | Yes | Includes at least one character from !@#$%^&*_+-=. |
Lowercase letters are always included. One password is generated in the browser for the page, then used to fill detected password and confirmation fields as needed. The normal PrestaShop account form submits it. Generation and shuffling use the browser's cryptographically secure crypto.getRandomValues. If that API is unavailable or fails, the script leaves the account form unchanged.
Email and account behavior
With Enable Automatic Password on, the module handles new-account email for registrations through forms marked by the module, including an edited password in optional mode. In password email mode, it emails the password submitted with the account form. It does not generate a second password on the server.
On versions with native reset tokens, setup-link mode stores a token valid for 24 hours and emails a link to the native password page. On PrestaShop 1.6, the link uses the native flow to generate and email a new password; customers can then sign in and change it in My account. The module does not store a reset token or promise 24 hour expiry on 1.6. Test the received link before using this mode on a live shop.
Silent mode suppresses only this module's password email. Native shop account emails can still be sent. Customers use normal account and password-reset facilities after registration. The module does not convert guest orders or back-office accounts by itself.
Verify and troubleshoot
- Create a test account on each selected page type. Confirm hidden fields are filled, or that visible fields can be edited and confirmation fields follow the change.
- Confirm the normal account submission succeeds and the email mode behaves as selected. For setup links, follow the received link and test the new password.
- Test existing-customer login, identity changes and forms injected during checkout. The script observes inserted form content, but custom account flows may not match its selectors.
- If fields are not handled, inspect JavaScript loading and the
displayHeaderandactionFrontControllerSetMediahooks. Standard input names includepassword,passwd,confirmationandpassword_confirmation. - If account creation succeeds but the module email is missing, check for the
mprcustpass_autohidden field and test PrestaShop mail delivery. Social-login flows that bypass the password form may never add the flag.
Customize templates and styles
The module includes these mail templates, each in HTML and text versions:
mails/en/mprcustomerpassword_account.html
mails/en/mprcustomerpassword_account.txt
mails/en/mprcustomerpassword_setup.html
mails/en/mprcustomerpassword_setup.txt
Both email types receive {firstname}, {lastname}, {email}, {shop_name} and {shop_url}. Password emails also receive {passwd}. Setup emails receive {setup_link}, {setup_instructions} and {setup_validity}. Setup templates are also supplied under mails/de/, mails/fr/, mails/pl/, mails/it/ and mails/es/; password email templates are supplied in English.
For a setup message, preserve {setup_link}, {setup_instructions} and {setup_validity} so the wording follows the native password flow. The validity text is empty on PrestaShop 1.6. For a password message, place {email} and {passwd} where you want the account credentials to appear.
Use .mprcustpass-info to style the notice. Use input[data-mprcustpass="1"] to style prepared password fields. Preserve normal input names in customized account templates.
Disable or uninstall
Turn off Enable Automatic Password to stop the module behavior. Uninstall from Module Manager to remove its menu entries and module configuration. Existing customer accounts and their stored passwords remain in PrestaShop.
Questions
1
Does the module keep a separate database of generated passwords?
No separate password table is created by the module. The browser fills the normal account form and submits the password to PrestaShop. The default send_password mode also includes that password in an email. setup_link stores a 24 hour reset token where supported. On PrestaShop 1.6, its link uses native password regeneration and email without reset-token fields. silent suppresses this module's password email; native shop emails can still be sent.
Known Issues
5
Welcome email with generated password sent in plain text
The auto-generated password is embedded in the welcome email as plain text, which is visible in email previews and may be cached by email clients.
Resolution note
The password is now sent as a one-time login link that expires after 24 hours. The actual password is shown only after the customer clicks the link.
Administration labels stayed in English
Module could not load on PHP 7.1
Administration could fail to open
Combined JavaScript could break password controls
Feature Requests
3
Implemented
Automatic customer passwords
Customer account email options
One-click updates
Changelog
v1.1.72026-05-21
- Addedcomplete FR/DE/ES/IT/PL translations
Older releases
v1.2.02026-04-20
- AddedLicense management tab with key management and renewal options
- Addedself-healing integrity checks for automatic diagnostics and repair
- Addedcomplete FR/DE/ES/IT/PL translations
- Improvedsettings form organization with tabbed layout
v1.1.02026-01-21
- AddedPrestaShop 9 and Hummingbird theme compatibility
- Addedconfigurable password complexity rules: minimum length, require uppercase, numbers, and symbols
- Fixedauto-generated password not sent in welcome email when PS mail uses Mailjet transport
- Improvedback-office toggle to optionally skip the password step at checkout for registered customers
v1.0.02025-10-23
- Initialrelease of Automatic Customer Password
- InitialAuto-generates secure passwords for new customer accounts created by administrators in back office
- InitialConfigurable option to skip password creation form at checkout with silent account creation
- InitialGenerated password delivered to customer via PS transactional email welcome template
- InitialBack-office toggle to enable or disable auto-generation independently from checkout skip
Demo
Test the full module before you buy
Buy a licence later and keep your settings.
- Your 30-day demo Test it on your own shop for 30 days from the first install.
- Ready demo shop Explore a ready demo shop in your browser.
- No registration No account, email or store domain needed.
By downloading, you accept the demo terms and privacy policy.
By opening this demo you accept the demo terms and the privacy policy.