All realestate.com.au are trying to do is give the user a persistent session registered to their email address. Think of it as kind of like a cookie which you c

All realestate.com.au are trying to do is give the user a persistent session registered to their email address. Think of it as kind of like a cookie which you can easily transfer between browsers to get a slightly more personalised experience. > This is especially true with the high amount of password reuse that goes on. I do agree that it is a bit off (read: probably illegal) that they allow users to change the password and then store the user's password in plaintext. The system would be considerably better if users could only use a system-generated password.