[Sachin Pikle]

I am not comfortable sending customer's password in an email. Even though we have a note to change the password, the system doesn't force the customer to change it. Is there a way to send a temporary system generated password in the email and force the customer to reset it when he signs in to the site with the temporary password?

[Kess]

Unfortunately, there is no way to change this behavior at the moment. But we understand that this is really not secure to send the passwords as plain text is insecure, so we will definitely change this behavior. We have the corresponding changes planned in our roadmap, so this will be included into one of the coming Ecwid versions.

[Sachin Pikle]

Thanks Kess. Do you have an ETA for this feature?

[Kess]

Unfortunately, no exact ETA yet, but we will do our best to make these changes as soon as possible.

[Sachin Pikle]

At the moment it looks I will be using the paid subscription. Will that help influence the ETA?

Also, does it mean that ecwid stores customer's password as un-encrypted plain text?

[Eugene Rimmer]

Originally Posted by Sachin Pikle

At the moment it looks I will be using the paid subscription. Will that help influence the ETA?

Also, does it mean that ecwid stores customer's password as un-encrypted plain text?

Sorry, but since the feature is not yet in the development plan, the exact ETA may not be estimated.

As for the way of storing customer passwords, Ecwid keeps them in a secure format that can be decrypted back to the actual text, once you have the algorithm and the key. We initially thought the password restoration that does actually bring you your forgotten password is what most users would expect, so we did it this way, unlike the other solutions that send the customer through the hurdle of changing it. But now we consider this is not the best recognized idea as people are really expecting us to change the password, not decrypt, so we are going to change that soon.

[Sachin Pikle]

Thanks Eugene. Hoping to see this feature implemented soon! :-)