# Mailgun smtp\_password change in GET /domains and /domains/ API calls

**URL:** <https://community.parseplatform.org/t/mailgun-smtp-password-change-in-get-domains-and-domains-api-calls/2119>\
**Category:** Parse Server 📡\
**Tags:** email-adapter, mailgun\
**Created:** [October 25, 2021, 4:57pm UTC](https://community.parseplatform.org/t/mailgun-smtp-password-change-in-get-domains-and-domains-api-calls/2119 "2021-10-25T16:57:50Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![CastAsHuman](https://community.parseplatform.org/user_avatar/community.parseplatform.org/castashuman/32/239_2.png) [@CastAsHuman](https://community.parseplatform.org/u/CastAsHuman)\
**Post date:** [October 25, 2021, 4:57pm UTC](https://community.parseplatform.org/t/mailgun-smtp-password-change-in-get-domains-and-domains-api-calls/2119/1 "2021-10-25T16:57:50Z")

</div>

I’m on `2.8.4` Parse Server, on which we use a Mailgun adapter for password reset. Today we got this email:

Hey there,

In our continual efforts to uphold the highest security standards possible to protect our customers, **starting November 1, 2021, we will no longer return a value for the `smtp_password` parameter in GET /domains and /domains/ API calls.**  **Why we’re doing this** As a security best practice, we are moving towards hashing SMTP passwords, just as we do with all other passwords on our platform. Due to this new standard, we will be unable to show the passwords in plain text once they are hashed and stored in our secure database. **How this impacts you** After this change, you will no longer be able to view the SMTP password in plain text and must store the password on your end – ideally using a secure password manager. **Depending on your configuration, any applications reliant on the `smtp_password` parameter could throw errors.**  **What you need to do** After securely storing your SMTP password, you will need to update any reliant systems. Applications that are expecting the plain text password in the API response will need to be updated to no longer rely on the password in order to function correctly. **We’ve created an [FAQ](https://email.learn.mailgun.com/e/c/eyJlbWFpbF9pZCI6IlJLdkFCQU1BQVh5alhrTUFnVkt0NWwyY3h1d2dFZz09IiwiaHJlZiI6Imh0dHBzOi8vaGVscC5tYWlsZ3VuLmNvbS9oYy9lbi11cy9hcnRpY2xlcy80NDA1MTIxMTY3Mzg3P3V0bV9zb3VyY2U9Y3VzdG9tZXJpb1x1MDAyNnV0bV9tZWRpdW09ZW1haWxcdTAwMjZ1dG1fY2FtcGFpZ249c210cC1wYXNzd29yZCIsImludGVybmFsIjoiYWJjMDA0MDNhMTEwYjJjZjA1IiwibGlua19pZCI6MTc2NX0/8a67bab770873d3f381d57dc6716f101c9a969cadb0d01c24f598c74f18836c6) to help you make the change.**

I’m not sure if it affects us or not.

---

<div class="post-metadata">

**Author:** ![uzaysan](https://community.parseplatform.org/user_avatar/community.parseplatform.org/uzaysan/32/59_2.png) [@uzaysan](https://community.parseplatform.org/u/uzaysan)\
**Post date:** [October 26, 2021, 6:08am UTC](https://community.parseplatform.org/t/mailgun-smtp-password-change-in-get-domains-and-domains-api-calls/2119/2 "2021-10-26T06:08:06Z")

</div>

Parse mailgun adapter uses mailgun v3.2.1. And by looking at the mailgun [source code](https://github.com/mailgun/mailgun-js/blob/f0c7ea6282ce83d44919805515ed37d12e82551b/lib/messages.ts#L18) seems like you dont need smtp password. I assume mailgun recieve a mail sending request and send mail from their own servers. So you are not sending email from parse server. You are just sending a request to mailgun and they send the mail. This shouldnt effect parse mailgun adapter.

Edit: [mailgun-js/request.ts at f0c7ea6282ce83d44919805515ed37d12e82551b · mailgun/mailgun-js · GitHub](https://github.com/mailgun/mailgun-js/blob/f0c7ea6282ce83d44919805515ed37d12e82551b/lib/request.ts#L167)

Also sending mail request is POST request. So you are not sending GET request (which they are planning to change behaviour) and this should not effect you.
