HN Explorer

Ask HN: Getting your username and password emailed to you?

2 points by solo960 ↗ HN
When you register for site how do you feel about getting your username and password emailed to you?

For example: Register at site --> create username/password--> get welcome email with username and password displayed

We are debating if its more convenient for the user to have that info in an email or is it a security risk.

I personally prefer it in an email, espcially for a new site so if I forget I can look it up instead of reseting the password.

Your thoughts?

2 comments

[ 4.3 ms ] story [ 19.3 ms ] thread
[deleted]
(comment deleted)
dmboyd
This is a non-starter, you don't really deserve a job if you cant see what is wrong with the following:

1) The web service storing usernames and passwords in an unencrypted or easily reversed encrypted format. (which it must be, since you are able to send an email with these details).(Hint: see the gawker media password leak)

2) Your email address being sent in plain text over an unencrypted mail service with untrusted intermediaries.