What encryption algorithm is used for the master password of odoo database?

The default encryption algorithm is pbkdf2_sha512, The result obtained by adding salt iterations to the hash algorithm is used as the algorithm of password . Its basic principle is through a pseudo-random function （ for example HMAC function ）, Take plaintext and a salt value as input parameters , Then repeat the operation , And finally generate the key . If the number of repetitions is large enough , The cost of cracking will become very high . The addition of salt value will also increase “ Rainbow watch ” The difficulty of the attack .
Let's look at a password structure obtained by this encryption algorithm ：
$pbkdf2-sha512$25000$ztkbw5jT.l8LwThHKKX03g$EFv2mH5uUh6VEZi4mmvzphsDnQdI1ufTw6JxppxXPfRIUj5JBK9N/kd.5NgiCCylwgiyUqCk0CiugHdYQQXNKA

The password goes through $ Symbols are separated into 4 part , The first part is the name of the calculation algorithm , The second is the number of iterations , The third part is the salt value , The fourth part is hash value .

Activate odoo A virtual environment , Run on the command line python, The plaintext password can be ’admin’ To encrypt , You can also ’admin’ Replace it with any plaintext password you want to use .

from passlib.context import CryptContext
print(CryptContext(['pbkdf2_sha512','plaintext'],deprecated=['plaintext'],).encrypt('admin'))

Available ：

$pbkdf2-sha512$25000$ztkbw5jT.l8LwThHKKX03g$EFv2mH5uUh6VEZi4mmvzphsDnQdI1ufTw6JxppxXPfRIUj5JBK9N/kd.5NgiCCylwgiyUqCk0CiugHdYQQXNKA

Put it in odoo.conf in ,

admin_passwd=$pbkdf2-sha512$25000$ztkbw5jT.l8LwThHKKX03g$EFv2mH5uUh6VEZi4mmvzphsDnQdI1ufTw6JxppxXPfRIUj5JBK9N/kd.5NgiCCylwgiyUqCk0CiugHdYQQXNKA

One day I forgot the database master password , You can use the above method to generate a new encrypted password , take odoo.conf Medium admin_passwd Just replace it .