Controlled Joomla user import and export

It works in both Joomla's administrator interface and frontend. The product is available as a standalone extension and is also included with every Frontend UserManager subscription.

Large operations run in resumable batches, allowing the workflow to continue safely without depending on a single long-running browser request.

User Import & Export — standalone and included

User Import & Export provides a guided CSV/XLSX workflow for creating, updating, exporting and migrating Joomla users. It combines visual column mapping, full-file validation, resumable jobs and protected result files.

The same component is available as a standalone product and is included with every Frontend UserManager subscription.

• CSV and XLSX — import and export core user data, group assignments and supported Joomla user custom fields.
• Validation before changes — dry-run the complete file and review create, update, skip and error results before processing.
• Flexible mapping — automatic suggestions, manual column mapping and reusable import/export profiles.
• Groups and custom fields — map groups by ID, title or hierarchy path; merge or replace group membership; include supported published com_users.user custom fields.
• Password migration — import plain passwords through Joomla's normal validation and hashing, or preserve compatible existing Joomla hashes without double hashing. Password-hash export is disabled by default and requires explicit privileged confirmation.
• Administrator and frontend workflows — the same processing engine, security controls and resumable batch handling in both interfaces.
• Frontend UserManager integration — launched directly from the user list and respects hierarchical scope, hidden groups, protected users and the optional username-equals-email rule.

Guided import workflow

1. Upload a CSV or XLSX file.
2. Choose whether the operation may create users, update existing users or do both.
3. Map source columns to Joomla core fields, group assignments and supported custom fields.
4. Use automatic mapping suggestions or adjust every mapping manually.
5. Add fixed group assignments when the group is not supplied by the source file.
6. Validate the complete file before making changes.
7. Review create, update, skip and error results.
8. Process the approved data in resumable batches.
9. Download a sanitised result report when processing is complete.

Validation checks the complete source file, rather than only the first rows, so structural and data problems can be resolved before users are changed.

Controlled export workflow

Choose the Joomla user data, groups and supported custom fields that should be included in the export.

Saved export profiles make recurring exports repeatable and consistent. CSV and XLSX output is protected against spreadsheet formula injection.

Generated files are stored privately and delivered through controlled, short-lived downloads.

User groups

User groups can be represented by:

• Numeric group ID
• Group title
• Full hierarchy path
• Fixed group assignments configured in the import

Multiple group columns are supported. Group membership can be merged with or replace the user's existing assignments.

All group changes remain subject to Joomla permissions and the active workflow's group restrictions.

Joomla custom fields

Published Joomla custom fields belonging to the com_users.user context can be imported and exported.

Field values are validated using the relevant Joomla field rules, including support for multiple-value fields where applicable.

Password migration

Imports can:

• Leave the password unchanged when updating an existing user.
• Pass a plain password through Joomla's standard password validation and hashing.
• Preserve compatible existing Joomla hashes, including bcrypt, Argon2i, Argon2id and legacy PHPass hashes, without double hashing.

Password-hash export is disabled by default.

Enabling it requires Super User access, the relevant component permission, an explicit option and a confirmation phrase. Hash exports use restricted, short-lived downloads and are not written to reports, logs or saved profiles.

Reusable profiles

Import profiles store column mappings and workflow choices.

Export profiles store selected fields, filters and output settings.

Profiles are isolated by owner, workflow type and integration context. They do not store source files, passwords or password hashes.

Validation and reports

Every import can be validated before processing.

The validation and result reports distinguish between:

• Users that will be created
• Users that will be updated
• Rows that will be skipped
• Rows containing errors

Downloadable reports provide actionable information without exposing passwords or password hashes.

Security

• Joomla ACL and CSRF protection throughout the workflow
• Job ownership and per-user permission checks
• Private temporary file storage
• Controlled and expiring downloads
• Spreadsheet formula-injection protection
• Sanitised logs and result reports
• Configurable retention and automatic cleanup
• Resumable server-side batch processing
• Protection for Super Users and restricted user groups
• No passwords or password hashes in logs, reports or saved profiles

Administrator and frontend workflows

Administrators can run complete import and export jobs from Joomla's administrator interface.

Authorised frontend users can run the same guided workflows without receiving access to the administrator backend.

Both interfaces use the same processing engine, validation rules, security controls and resumable batch system.

When installed standalone, User Import & Export uses its own Joomla component permissions and frontend menu items.

Frontend UserManager integration

When launched from Frontend UserManager, User Import & Export automatically respects:

• Frontend UserManager's hierarchical permission scope
• Hidden and protected groups
• Protected users and Super Users
• The optional username-equals-email configuration
• The current frontend administrator's permitted users and groups

Import and export actions can be launched directly from the Frontend UserManager user list. After the workflow is complete, the user returns to the same frontend management context.

Standalone and included

The standalone package contains User Import & Export and the shared LolkV Updates installer plugin.

The identical User Import & Export component is also included with every Frontend UserManager package.

Customers who also need frontend management of individual users, groups and access levels can therefore choose Frontend UserManager without purchasing User Import & Export separately.

Languages

English is included. Separate language packs are available for Danish, German and French.

Requirements

• Joomla 5.4 or Joomla 6.x
• No Joomla 6 Backward Compatibility plugin required
• PHP 8.2 or later
• PHP 8.3 or later when required by Joomla 6
• MySQL 8.0+ or MariaDB 10.11+

Subscription and updates

User Import & Export is a paid download with Single and Professional subscriptions.

Both plans include the complete import and export functionality, downloads, official updates and support for 12 months.

• Single covers official updates and support for one registered production website.
• Professional covers official updates and support for an unlimited number of registered production websites.
• Local development, staging and test installations do not count as production websites.
• Renewals receive a 20% loyalty discount.

The installed extension continues to work after a subscription expires. Access to new downloads, official updates and technical support requires an active subscription.

Protected one-click updates are delivered through Joomla's Extension Manager using the customer's download key.

Product information · Live demo · Documentation · Pricing