3 ms·
To be absolutely pedantic including the password in the signup email doesn't mean that they are storing it in plain text as they could have just generated the e
by kevincox 6y ago
To be absolutely pedantic including the password in the signup email doesn't mean that they are storing it in plain text as they could have just generated the email then thrown away the password.
However I would bet that frequently they do, frequently the emails are logged for a substantial period of time and it isn't a best practice anyways.
- loopback_device 6y agoConsidering that emails fly through a bunch of MTAs and also occasionally aren't transmitted via TLS, none of it matters, your password is public by the time you see the email