Linked Questions

63
votes
3answers
8k views

Website returning plaintext password [duplicate]

I have recently logged into a website. When I clicked on the "Update Profile" page, you are displayed with a list of text boxes for all the user fields, e.g. name, email, phone number etc. There is ...
4
votes
3answers
2k views

Forgot Password? - sends email with plaintext password [duplicate]

A "reputable" education company that my university utilizes for it's Physics course online materials sent my plaintext password in an email after using the Forgot Password? tool. I know that this is ...
4
votes
0answers
142 views

Dealing with systems that store/send passwords in plain-text [duplicate]

Possible Duplicate: What to do about websites that store plain text passwords When using a system as it was designed to be used, and the system provides proof that it is storing and/or ...
0
votes
0answers
62 views

Phone company keeping password in clear text [duplicate]

I recently found out that the Phone company where I have my contract is storing passwords on their server in clear text and employees can access it given the name or contract number of a person. ...
23
votes
7answers
17k views

Forgotten password or reset link, which is more secure to email?

I originally posted this as a reply here in this thread but didn't get much feedback on it, and now I'm curious as to what others think is the best approach, or if there is any difference between the ...
22
votes
4answers
2k views

Is it a bad idea for an information holder to e-mail a user their password?

A couple of websites with which I'm registered have, after a period of inactivity on my part, each sent me an e-mail to remind me that I'm still registered. In each case, that e-mail has included my ...
5
votes
8answers
7k views

Alternatives to sending out passwords in plain text via e-mail?

One of my hosting providers is sending a new password in plain text per e-mail, on request. How insecure is this practice? What would be a good (more secure) alternative to this?
5
votes
3answers
4k views

Is it ok for software to store passwords locally in plain-text?

There are already plenty of questions about what to do when websites store plain-text passwords. But this one is a little different. I use a piece of open-source (see below) software for playing ...
6
votes
1answer
410 views

Who in UK I can report to if I know company is storing my password in plain text?

I live in UK, some time ago I wanted to login to my electric company account to check the bill and such, and I had forgotten my password - long story short I got my account locked and had to call them....
1
vote
2answers
163 views

Is there a secure way that a website can retrieve and send your “forgotten” password in plain text [duplicate]

My question is related to What to do about websites that store plain text passwords. There are a few websites that I use that when I click "forgot password" my password is sent in plain text to the ...