Why am I getting plain text passwords in my emails, are my passwords hashed?

After registering as a user on any JMIR website, or if you are added as a reviewer by an editor for an article, you will receive an email that informs you of your JMIR account information and will contain your JMIR username, and password in plain text. 

Currently, this email is generated and sent before we store the hashed version of the password into our database. Therefore, after this email is sent there will be no further reference to your password in plain-text and the user is the only person that will have the email.

If you have any concerns with your password that is sent to you in plain-text you may change your password (https://www.jmir.org/user/changePassword), and your new password will be hashed and stored into our database, and no email will be sent with your new password.