How are my passwords and SMTP credentials stored?

The password we don't store: yours

Hodiploy has no password of its own: you sign in from the client area, through single-use links. There is no Hodiploy password database to steal, phish or replay.

Encrypted, and write-only

The credentials you do entrust to the platform (SMTP username and password, the Odoo master password, Odoo Enterprise codes and tokens, webhook signing keys) are stored encrypted with AES-256-GCM, an authenticated encryption standard, in Hodiploy's own database: never in clear text.

The screens that collect them are write-only: once a value is saved, the interface only ever shows that it exists, masked. It can be replaced, never read back. And the requests that carry a secret are excluded from our own technical logs.

Your Odoo passwords stay in your Odoo

The passwords of your Odoo users are none of Hodiploy's business: they live inside your own database, hashed by Odoo as standard, on your own server. For the SMTP configuration itself, see How do I configure email sending (SMTP) on my Odoo instance?.

Updated on: 25/08/2026