3 ms·
Usually, when you receive your password after signup that does not necessarily mean it is stored in plaintext, because password can be kept in memory through th
by gnufied 15y ago
Usually, when you receive your password after signup that does not necessarily mean it is stored in plaintext, because password can be kept in memory through the process.
It is warning sign though, agreed.
- makethetick 15y agoI received the login info email after I clicked the activation link in a previous email, this means the password must have been stored in a database until I clicked the activation link. Sorry, should of added that previously.
- mootothemax 15y agoI received the login info email after I clicked the activation link in a previous email, this means the password must have been stored in a database until I clicked the activation link That's not a good sign. The best case scenario I can think of is that the email body is generated at registration and sent out once the activation link is clicked. After this the template is deleted. But it'd be far easier just to store your password in plaintext and go from there. Like you, I'm suspicious.
- baddox 15y agoHonestly, I would rather a site store my password in plain text than send it to me via email. At least if it's stored in plain text, it still requires a security breech to access it. Sending a plain text password via email is no worse than having an insecure (non HTTPS) login form.