Careful about what you deduce from that. Just because they sent it to you in plain text doesn't mean it is stored in plain text. Was the password something yo

Careful about what you deduce from that. Just because they sent it to you in plain text doesn't mean it is stored in plain text. Was the password something you put in or something they generated on your behalf? If you do a "forgot my password" and they can produce the password they are either using plain text or reversible encryption (not much difference). If you get a reset link or a new randomly generated password its hard to tell how they are storing them. Not that emailing them is a good idea, but it requires a different kind of attack than if passwords are stored in plain text.