Magento 1 End of Life Announcement
You must migrate to Magento 2 or another platform before June 30, 2020, if you are currently integrated with Magento 1.
- Increased risk of data breaches, with possible damage to your brand and reputation.
- Exposure of becoming a security target without any upgrade or security patches.
- Falling out of compliance with Payment Card Industry Data Security Standards (PCI DSS). These global standards are set by card entities and apply to all merchants that process payments.
This is not a PayPal-specific requirement. PCI DSS requirements apply to your integrations with card payment brands, such as Visa, MasterCard, American Express, Discover, JCB, and any other payment processor on the Magento 1 platform. Visa has stressed that urgent action is required for merchants to migrate from Magento 1 and advised merchants to be aware of their responsibilities in securing their environment to help prevent the loss of payment card data.
Please review the Magento Commerce Software End of Support FAQ here.
What do I need to do?
If you are currently using Magento 1, you must do one of the following by June 30, 2020:Migrate to the Magento 2 platform
- Get started with migrating to the Magento 2 software.
- PayPal merchants - Follow the instructions on the Magento developer site to set up PayPal payment methods.
- Braintree merchants - Follow the instructions on the Magento developer site to set up Braintree payment methods.
- Payflow merchants - Follow the instructions on the Magento developer site to set up Payflow payment methods.
Or migrate to another platform
- See our Partners page for a list of system integrators and e-commerce solution providers.
FAQs
Q: Which versions of Magento 1 are impacted?
A: All versions of Magento 1 are impacted, including Magento Commerce 1 (formerly known as Enterprise Edition) and Magento Open Source 1 (formerly known as Community Edition).Q: What happens if I continue using Magento 1 after June 30, 2020?
A: On July 1, 2020, your Magento 1.x platform will no longer be supported by Magento, which includes providing security patches critical to maintaining compliance with the Payment Card Industry Data Security Standards (PCI DSS). The global PCI DSS standards require each entity to “develop and maintain secure systems and applications by installing applicable vendor-supplied security patches.” Because Magento is no longer providing security patches, your integration may become more vulnerable to attacks, potentially resulting in impacts on your brand reputation, as well as potential financial impact.This is not a PayPal-specific requirement. PCI DSS requirements apply to your integrations with card payment brands, such as Visa, MasterCard, American Express, Discover, JCB, and any other payment processor on the Magento 1 platform. Visa has stressed that urgent action is required for merchants to migrate from Magento 1 and advised merchants to be aware of their responsibilities in securing their environment to help prevent the loss of payment card data.
Magento Association, a separate entity from Magento, has published the following links providing merchants additional information and resources around the call to action for the upcoming June 30th deadline.
Please review the Magento Commerce Software End of Support FAQ here.
Q: If I get the security patches, does that mean I’m compliant?
A: The security patches are one step towards ensuring meeting PCI compliance but do not necessarily equal PCI compliance.We strongly encourage migration from Magento 1 before July 1.
Steps you can take to ensure business continuity and no risk to your business or cardholders include migrating off Magento 1 or to ensure applying the security patches, and other actions such as passing PCI reviews with a Qualified Security Assessor (QSA).
Q: What is the cost of migrating to Magento 2?
A: It depends on the size of your site and the complexity of the build. We recommend reaching out to Magento. You may also contact System Integrators to discuss pricing options.
Q: How long does it take to migrate to Magento 2 or a new platform?
A: This is dependent on the requirements of your site, and the ecommerce platform you’re choosing to move to migration can take a matter of weeks, to several months. We recommend kicking off your migration project as soon as possible.
Q: What is the cost of the other platforms?
A: It depends on the size of your site and the complexity of the functionality you want to develop. You will need to contact the one that is the right fit for your business.