Bluehost Stores Passwords in Plaintext "last four characters of you password." (bluehost.com)

You are required to give them your last 4 characters of your password over phone support in order to cancel.