3 ms·
> The went ahead and sent us our password in plaintext. (actually a screenshot of the password in plaintext). Sounds more than reasonable to me. After you get
by powertower 14y ago
> The went ahead and sent us our password in plaintext. (actually a screenshot of the password in plaintext).
Sounds more than reasonable to me. After you get it, then you can use it to log in, and change it.
- dpark 14y agoNope. Your password shouldn't be stored in plaintext in the first place. It should be properly salted and hashed with a modern hashing function like bcrypt. Storing passwords in plaintext turns security breaches from "that's annoying" to "oops we just exposed 12 million passwords".