I am new to joomla, and working on joomla application which is currently running on production environment.

Application contains 1000+ registered users.

As per GDPR Policy, I have requirement for encryption and decryption of PII (User personal information) to prevent data loss.

In my application I am using user personal data for authentication purpose which contain name of user and email id, which needs to be encrypted before storing data in database and also needs to decrypt before using.

I am using core user authentication process of joomla

Application running on below versions Joomla 3.9.7 Php 5.4.16 Apache 2.4.6 MySQL Unix server

I know php5 is EOL now and needs to upgrade the same.

  • 1
    Welcome to JSE and thank you for your question. Please take our tour to familiarise yourself with this Stack Exchange community.
    – pe7er
    Apr 8, 2022 at 12:07
  • 1
    could you point us to the articles of GDPR that mandate it? I remember that the encryption of data is strongly advised but not mandatory for data which isn't too sensitive i.e. emails. That said, in order to encrypt emails you might write a custom authentication plugin and implementing encryption there, and disable the basic one Apr 9, 2022 at 7:40
  • 1
    Also, this should only be related to the requirement to inform users in case of a data breach. But your outdated stack may be more relevant in this respect Apr 9, 2022 at 7:45
  • @RiccardoZorn So basically Encryption/decryption is not possible in joomla user core plugin.. and also I cannot write custom plugin as well because application is already contains 1000+ users
    – Akoli
    Apr 11, 2022 at 5:22


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy