# Hiding or encrypting SMTP password required in app.yml

**URL:** <https://meta.discourse.org/t/hiding-or-encrypting-smtp-password-required-in-app-yml/61505>\
**Category:** Self-hosting\
**Created:** [24. April 2017 um 16:29 UTC](https://meta.discourse.org/t/hiding-or-encrypting-smtp-password-required-in-app-yml/61505 "2017-04-24T16:29:12Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![tmelano](https://avatars.discourse-cdn.com/v4/letter/t/b9e5f3/32.png) [@tmelano](https://meta.discourse.org/u/tmelano)\
**Post date:** [24. April 2017 um 16:29 UTC](https://meta.discourse.org/t/hiding-or-encrypting-smtp-password-required-in-app-yml/61505/1 "2017-04-24T16:29:12Z")

</div>

My group at work is testing discourse. There have been concerns raised about the requirement in the yml file for a typed password to access an smtp server. How secure is this? Is there an alternative in which the stmp password is stored in an encrypted way?

---

_[View the full topic](https://meta.discourse.org/t/hiding-or-encrypting-smtp-password-required-in-app-yml/61505)._