> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://help.hodi.host/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# How are my passwords and SMTP credentials stored?

## The password we don't store: yours

Hodiploy has no password of its own: you sign in from the client area, through single-use links. There is no Hodiploy password database to steal, phish or replay.

## Encrypted, and write-only

The credentials you do entrust to the platform (SMTP username and password, the Odoo master password, Odoo Enterprise codes and tokens, webhook signing keys) are stored **encrypted with AES-256-GCM**, an authenticated encryption standard, in Hodiploy's own database: never in clear text.

The screens that collect them are **write-only**: once a value is saved, the interface only ever shows that it exists, masked. It can be replaced, never read back. And the requests that carry a secret are excluded from our own technical logs.

## Your Odoo passwords stay in your Odoo

The passwords of your Odoo users are none of Hodiploy's business: they live inside your own database, hashed by Odoo as standard, on [your own server](https://help.hodi.host/en/article/is-my-data-isolated-from-other-customers-1ptjb9k/). For the SMTP configuration itself, see [How do I configure email sending (SMTP) on my Odoo instance?](https://help.hodi.host/en/article/how-do-i-configure-email-sending-smtp-on-my-odoo-instance-1pfisl4/).