New user registration confirmation email: plain text password?

[gabrielr]

Upon receiving my confirmation email, I noticed that it not only read back to me username, but also my plain text password. I can't see how the benefits of reminding users of their passwords are greater than the potential security risk a plain-text password in an insecure email can pose.

Just a thought.

[Open Source]

Re: New user registration confirmation email: plain text password?

This site is not an encrypted site and I would suggest not using any kind of personal password for your profile. I would use something that would be okay if it were compromised. Nobody will see your password on the server side, and unless someone intercepts or reads your emails, there should be no one seeing the password on your side either except you. Let me know if you have any questions.