4 ms·
One of the comments in the blog is: "Just signed up for pingdom and they sent me my password via email in clear. Great!" I signed up to check if they really do
by skrish 15y ago
One of the comments in the blog is: "Just signed up for pingdom and they sent me my password via email in clear. Great!"
I signed up to check if they really do. What pingdom does upon sign-up with your email id they send a password via email.
I have a high opinion of pingdom & I was expecting them to enforce change of password during first login, but that did not happen!
- jiggy2011 15y agoEven if they enforced a password change it wouldn't help if they are storing them in plaintext.
- smackfu 15y agoA one-time password is usually generated and emailed, then hashed and stored, so not generally stored in plaintext.
- skrish 15y agoIt is called a one time password for a reason. Since it has been sent out via some medium in plain text, it is a good practice to force change password on next login.