# Inviting users by email (SMTP setup)

**URL:** <https://discuss.elastic.co/t/inviting-users-by-email-smtp-setup/249375>\
**Category:** Elastic Search\
**Created:** [September 21, 2020, 2:08pm UTC](https://discuss.elastic.co/t/inviting-users-by-email-smtp-setup/249375 "2020-09-21T14:08:47Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![ylasri](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ylasri/32/86120_2.png) [@ylasri](https://discuss.elastic.co/u/ylasri)\
**Post date:** [September 21, 2020, 2:08pm UTC](https://discuss.elastic.co/t/inviting-users-by-email-smtp-setup/249375/1 "2020-09-21T14:08:47Z")

</div>

I would like to enable [smtp](https://www.elastic.co/guide/en/workplace-search/7.9/workplace-search-smtp-mailer.html#mailer-gmail-example) parameter for workplace search

I provided following config :  
what i should use exactly in "secure-pass-phrase" the password or something else ?  
like [here](https://www.elastic.co/guide/en/elasticsearch/reference/current/actions-email.html#gmail)

```
email.account:
  enabled: true
  smtp:
    auth: plain
    starttls.enable: true
    host: smtp.gmail.com
    port: 587
    user: example@gmail.com
    password: secure-pass-phrase
  email_defaults:
    from: noreply@gmail.com

```

Thanks for your help

---

<div class="post-metadata">

**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Post date:** [September 21, 2020, 2:23pm UTC](https://discuss.elastic.co/t/inviting-users-by-email-smtp-setup/249375/2 "2020-09-21T14:23:49Z")

</div>

Hey Yassine,

the link you provided is for watcher/alerting - and not for workplace search. Just to be sure that this was intended?

The correct way to store passwords is using the keystore instead of the configuration file using the `bin/elasticsearch-keystore` command. The password is the one you got from your SMTP provider.

Hope this helps!

--Alex

---

<div class="post-metadata">

**Author:** ![ylasri](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ylasri/32/86120_2.png) [@ylasri](https://discuss.elastic.co/u/ylasri)\
**Post date:** [September 21, 2020, 2:33pm UTC](https://discuss.elastic.co/t/inviting-users-by-email-smtp-setup/249375/3 "2020-09-21T14:33:28Z")

</div>

Thank you @spinscale for your feedback  
indeed, i was looking at the config of workplace search on how to setup mailer to invite users. I can see the config is very simular to watcher but no precision if we need to put directly clair password in `config/enterprise-search.yml` or we can use any secure keystore like for elasticsearch.

for the suck of my test, i just added plaint password into `config/enterprise-search.yml` and it's working, but i'm looking to secure the password.

Thanks

---

<div class="post-metadata">

**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Post date:** [September 21, 2020, 2:45pm UTC](https://discuss.elastic.co/t/inviting-users-by-email-smtp-setup/249375/4 "2020-09-21T14:45:35Z")

</div>

ah, ic... I don't think securing the password for enterprise search is possible right now, as the keystore is elasticsearch specific at the moment.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 4, 2022, 8:13am UTC](https://discuss.elastic.co/t/inviting-users-by-email-smtp-setup/249375/5 "2022-11-04T08:13:38Z")

</div>