Title: Credentials Sec. Issue
Last modified: April 12, 2022

---

# Credentials Sec. Issue

 *  Resolved [Tano](https://wordpress.org/support/users/tanohex/)
 * (@tanohex)
 * [4 years, 2 months ago](https://wordpress.org/support/topic/credentials-sec-issue/)
 * Hello,
 * Please note that the plugin (v2.1.1) stores the server credentials in plain text.
 * `s:4:"port";s:3:"465";s:4:"auth";s:3:"yes";s:8:"username";s:19:"noreply@test.
   com";s:8:"password";s:9:"Testing123";s:8:"auto_tls";`
 * This is a very dangerous practice, that can lead to data breaches, like it happened
   with another plugin that worked in the same way as yours.
    [https://www.wordfence.com/blog/2016/04/panama-papers-wordpress-email-connection/](https://www.wordfence.com/blog/2016/04/panama-papers-wordpress-email-connection/)–
   one of the largest data breaches in history.
 * So please consider **urgently** encrypting the mail server credentials before
   storing them.
    Even the APIs need to be encrypted, as any hacker with access 
   to the DB/Config, can hijack the SMTP system and start sending phishing emails…
 * Thanks!

Viewing 1 replies (of 1 total)

 *  Plugin Author [Shahjahan Jewel](https://wordpress.org/support/users/techjewel/)
 * (@techjewel)
 * [4 years, 2 months ago](https://wordpress.org/support/topic/credentials-sec-issue/#post-15552933)
 * Hello [@tanohex](https://wordpress.org/support/users/tanohex/),
    We have option
   to store the credential to wp-config.php file for all type of connections.

Viewing 1 replies (of 1 total)

The topic ‘Credentials Sec. Issue’ is closed to new replies.

 * ![](https://ps.w.org/fluent-smtp/assets/icon.svg?rev=2458343)
 * [FluentSMTP - WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider](https://wordpress.org/plugins/fluent-smtp/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/fluent-smtp/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/fluent-smtp/)
 * [Active Topics](https://wordpress.org/support/plugin/fluent-smtp/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/fluent-smtp/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/fluent-smtp/reviews/)

 * 1 reply
 * 2 participants
 * Last reply from: [Shahjahan Jewel](https://wordpress.org/support/users/techjewel/)
 * Last activity: [4 years, 2 months ago](https://wordpress.org/support/topic/credentials-sec-issue/#post-15552933)
 * Status: resolved