Plain Text Offenders (opens in new tab)

(plaintextoffenders.com)

11 pointsdefinetheword5y ago3 comments

3 comments

quick description: it's a list of screenshots of emails containing plain text passwords (often emailed back).

To be absolutely pedantic including the password in the signup email doesn't mean that they are storing it in plain text as they could have just generated the email then thrown away the password.

However I would bet that frequently they do, frequently the emails are logged for a substantial period of time and it isn't a best practice anyways.

loopback_device5y ago

Considering that emails fly through a bunch of MTAs and also occasionally aren't transmitted via TLS, none of it matters, your password is public by the time you see the email

j / k navigate · click thread line to collapse