3 ms·

Sorry, I didn't clarify: they showed in plaintext the password that I supplied and emailed my password back to me.

• mootothemax 16y ago
  Emailing a password after registration does not, in itself, indicate that passwords are being stored in plain text.
  • Kudos 16y ago
    In addition to this, the open source distribution of Wordpress hashes passwords.
  • nodata 16y ago
    My secure password being sent across the open net in an e-mail is reason enough to shame the company doing that.
    • bogomips 16y ago
      While much is made about passwords being sent across the open net, almost every site short of banks allow you to reset a password with an email, which is a close to identical problem.
      • epochwolf 16y ago
        Reset links can have an expiration time.