Password in cleartext by mail?? OMG X_x

You gotta be kidding with me folks. We are in 2012. You never ever store or send a password in cleartext. What this says to me is that you are incompetent. Good luck with that. Cheers.

Hello Jarl,

First, I understand your point, yes it is insecure, but this is WordPress, not s2Member.

Also, I believe WordPress expects people to use a secure email like Gmail.

so I thought about it a bit, and, how do you plan to give their passwords to users? Either way it’s gotta be given somehow, and it’s insecure anyway.

– Eduan

Hi Jarl,

As Eduan mentioned, the sending of passwords in cleartext is a WordPress feature, not s2Member.

With s2Member Pro, our Pro-Forms feature allows you the option of having the users create their password during signup so that no passwords need to be sent via email.

I just wanted to add, that it’s possible with s2Member to edit the welcome email message, and remove the plain text password from that email message, so it’s never received under any circumstance.

See: Dashboard -› s2Member® -› General Options -› Email Configuration