I will admit that under this functionality it would, in theory, be possible for one to grief a user in an Unfuddle account if one knew the correct email address

I will admit that under this functionality it would, in theory, be possible for one to grief a user in an Unfuddle account if one knew the correct email address. I say "in theory" because this has never happened in Unfuddle. In any case, I am pleased to announce that this is no longer possible. In the last two days we have completely changed the password recovery process in Unfuddle. The process looks something like this: 1) User requests to recover his/her password by entering email address in reset form (just like before) 2) An email is sent containing a secure link to a password reset form 3) User clicks on link to access the form only if he/she actually wants to reset the password 4) User enters desired password and confirms it 5) Password is reset and never sent through email or transmitted unencrypted. This takes care of all your points with the exception of #3. As cheald mentioned below, if someone gains access to your email you are in trouble anyway. Take some responsibility and use good password sense when protecting things which are important to you. Finally, I want to make it clear that we do not store passwords in plain text and never have. Please confirm such speculations with a service provider before posting things you don't know in public.