Larion Studios forum stores your passwords in unhashed plaintext. Don’t use a password there that you’ve used anywhere else.

  • dangblingus@lemmy.worldEnglish
    19·
    1 year ago

    I’ve literally never had a service provider email me my own password ever. Maybe a OTP, but never my actual password. And especially not in plaintext.

    What would be the necessity behind emailing someone their own password? Doesn’t that defeat the purpose of having a password? Email isn’t secure.

    • wim@lemmy.sdf.orgEnglish
      12·
      1 year ago

      I find that very hard to believe. While it is less common nowadays, many, if not most, mailing list and forum software sent passwords in plaintext in emails.

      A lot of cottage industry web apps also did the same.

    • bnjmn@lemmy.worldEnglish
      4·
      1 year ago

      Idk if I’m misremembering, but it’s my impression that they did this a lot in the 2000s, haha. I guess bad practices have a habit of sticking around

    • EssentialCoffee@midwest.socialEnglish
      2·
      1 year ago

      I’ve had service providers physically mail my own password to me before. Just crazy.

      Always use unique passwords for every site.