Amazon Cognito Adds Support for Importing Users with Password Hashes

Imported users can now sign in immediately with existing passwords as Cognito supports hashed credential imports via CSV files.

By Clara Morgan · Editorial pseudonym · 2026-07-15 · 1 min read

AI-ASSISTED REPORTING · RETROSPECTIVE ARCHIVE

Retrospective edition: 2026-07-15. Source published: 2026-07-15. Added to this archive: 2026-11-03. This briefing was prepared later from the linked announcement; it was not published on this website on the historical edition date.

Amazon Cognito enhanced its user import feature to accept CSV files containing password hashes rather than forcing password resets at first sign-in. The service supports multiple hashing algorithms including bcrypt, scrypt, Argon2id, and PBKDF2 with SHA-256, ensuring seamless migration of users while maintaining security.

During import, Cognito verifies passwords against stored hashes on initial sign-in and applies additional cryptographic protections to imported hashes in storage. This feature is available in all AWS regions where Cognito operates. The source does not detail independent security evaluations beyond vendor descriptions.

Source & further reading

Amazon Cognito now supports importing users with password hashes ↗

Source published 2026-07-15. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.