4 ms·

But does this mean you are storing passwords in cleartext?

• NicoJuicy 12y ago
  That is not what he said, they send a mail with the new password, so that doesn't mean they store the passwords in plaintext (not cleartext). It just generates a password, mails it and then (probably) encrypts it.
  • yuvipanda 12y ago
    Ah, apologies. Misread. Still could be better, though - with a reset link that then creates a new password.