Change record status: 
Project: 
Introduced in branch: 
7.x
Introduced in version: 
7.100
Description: 

user_pass_rehash() now separates the parameter values when calculating the resulting hash.

Any existing unused password reset links or account cancel links generated before this change is applied will no longer be valid after the change is deployed. Users should be able to request new links that will work as expected.

Impacts: 
Site builders, administrators, editors