I recently found out that piwik also uses a login token of the MD5 of the password[0].  So this mistake is still very prevalent.<p><i>If you want to provide a one-click automatic login to Piwik for your users, you can use the ‘logme’ mechanism, and pass their login &amp; the md5 string of their password in the URL parameters:<p><a href="https:&#x2F;&#x2F;stats.example.org&#x2F;index.php?module=Login&amp;action=logme&amp;login=your_login&amp;password=your_MD5_password*" rel="nofollow">https:&#x2F;&#x2F;stats.example.org&#x2F;index.php?module=Login&amp;action=logm...</a><p>[0] - <a href="http:&#x2F;&#x2F;piwik.org&#x2F;faq&#x2F;how-to&#x2F;#faq_30" rel="nofollow">http:&#x2F;&#x2F;piwik.org&#x2F;faq&#x2F;how-to&#x2F;#faq_30</a>