Passwords in Emails!

| 4 Comments | No TrackBacks
From: TheKnot.com
Subject Line: Welcome to The Knot!
Date: Sunday, February 8, 2009

From: OurWeddingDay.com
Subject Line: Welcome to OurWeddingDay.com
Date: Wednesday, February 11, 2009

From: Crate and Barrel
Subject Line: Have fun with your Gift Registry
Date: Thursday, February 12, 2009

Wow. I received 3 Welcome emails this week that displayed my password in the email. (I have censored out my password in the links above.) I don't know if there is rule against doing this, but there should be. Email is far from secure, and I would hate to have my password fall into the wrong hands. It also hurts my trust in the brand - if I'm not safe giving my password to Crate & Barrel, where am I safe?


Comments

Well Congrats on the wedding at least!


Thanks! :)


I understand your concern but exactly *where* would you like your password to appear for reference? (Especially if it is a random one chosen *for* you.)


I think a temporary password would be fine to email, but in these cases they were not temporary. For cases like the ones I received, I would expect to not be emailed the password (username is fine).

If I try to login to the website later and forget my password I could be asked one (or multiple) "security question/s" which if answered correctly would email me a new temporary password, or a link to a page where I can reset my password.


Post a comment

If you haven't left a comment here before, you may need to be approved by the site owner before your comment will appear. Until then, it won't appear on the entry. Thanks for waiting.

* required field