3 ms·
This is actually the best and only real way of knowing a site you just signed up to is storing passwords in the clear: 1) Create account with "throw-away" pass
by dotBen 17y ago
This is actually the best and only real way of knowing a site you just signed up to is storing passwords in the clear:
1) Create account with "throw-away" password
2) Invoke "recover password" functionality
3) Check email to see if they send you your password in the mail (doh), or if they ask you to log in to create new one (yay)
- sev 17y agoUnfortunately that's not a way of 'knowing' a site stores passwords in the clear or not. They can send you a new password and still store them in plaintext.
- dotBen 17y agoThis is true, I riffed of my first comment too quickly. Thanks for pointing out. It's still a good indicator, and if you do get back that throw-away password then you know to be extra careful/give the site a miss.
- JoachimSchipper 17y agoUsing a different, decent password for each site is a good idea anyway. This doesn't apply to, say, the New York Times, of course; but accounts that you care about should have decent passwords.