# Should the password be plain text when creating a user through the API?

**URL:** <https://meta.discourse.org/t/should-the-password-be-plain-text-when-creating-a-user-through-the-api/66024>\
**Category:** Development\
**Created:** [July 11, 2017, 11:33pm UTC](https://meta.discourse.org/t/should-the-password-be-plain-text-when-creating-a-user-through-the-api/66024 "2017-07-11T23:33:11Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![spirobel](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/spirobel/32/170908_2.png) [@spirobel](https://meta.discourse.org/u/spirobel)\
**Post date:** [June 16, 2020, 2:22pm UTC](https://meta.discourse.org/t/should-the-password-be-plain-text-when-creating-a-user-through-the-api/66024/6 "2020-06-16T14:22:23Z")

</div>

if you want to go the extra mile, you can do certificate pinning in your APP to make sure there is no man in the middle attack.

---

_[View the full topic](https://meta.discourse.org/t/should-the-password-be-plain-text-when-creating-a-user-through-the-api/66024)._