5 ms·

I suppose they can generate the password, and email it to you before storing the hashed password in database?

• greenpizza13 10y ago
  They could. The real issue is when you do a 'forgot password' and they send it to you. That's a big red flag.