Some applications tend to hide completely the user associated email address or just showing a part of it (e.g. f***[email protected]
) in the user's personal settings. Other applications don't mind showing the full email address.
What are the security implications of knowing the email address of a possible compromised account? Why some applications hide it, especially in username and password based authentication?