Hi Team,
Is there any possibility admin can view all user’s password or from database we see the current password of user’s.
Hi,
the password is stored on the db level, but only the md5-hash. What is the purpose of getting the user passwords?
Hi,
Thank you for your response, i only want all the user password to access their data by their login id for testing purpose.
How to reverse the md5 hash because all password show as encrypted format in user_hash column of users table.
The idea of hashs is to not be able to convert it back to the real password 
You can have a look if your users are using very common passwords, in that case you can compare those hashs with existing/precalculated rainbow tables (Rainbow table - Wikipedia) as long as they are not salted.
But the better approach:
- if its meant for testing, copy your hash (e.g. hash of user admin) and insert it for all other users/specific users => you can login with any username using your password. this should only be done in your local dev environment, as every user would be locked out.
- if you need to do it in a live system: install this addon: SecuritySuite - SugarCRM Teams | SuiteCRM Teams Module
There are other cheaper options
1 Like
My training ethos is kicking in… a good admin should not need the password of another user - it is much much much safer to use tools to do the job that will leave an appropriate audit trail - to protect you more than anything else.
I’ve used the addons mentioned above before and they are a good method to get you the required solution
1 Like