3 ms·
If a site can email you your password, they are basically storing it in clear text. Otherwise they could not send you your password (because they would only ha
by paxunix 10y ago
If a site can email you your password, they are basically storing it in clear text. Otherwise they could not send you your password (because they would only have the hash of it). This is clearly a huge security risk.
- prashnts 10y agoI suppose they can generate the password, and email it to you before storing the hashed password in database?
- greenpizza13 10y agoThey could. The real issue is when you do a 'forgot password' and they send it to you. That's a big red flag.