Bluehost Stores Passwords in Plaintext "last four characters of you password."

You are required to give them your last 4 characters of your password over phone support in order to cancel.