›

Passwords stored in ClearText?

FilthyPumpkinFilthyPumpkin
edited July 2009 in Site Support
Hi,

I must say that I was kinda surprised by the Welcome mail you sent to my e-Mail address, mainly because it contained my password in Clear Text. I'm not sure if you actually store them in clear text (i doubt so, as after the great reddit fiasco in 2006, no one in their rightful mind would not use a salted hash), but I would recommend not sending them round through unprotected channels like e-Mails. That is scary ;)

Comments

  • WarpSpeedWarpSpeed
    edited July 2009
    Notice when you log on that it sends the password unencrypted as well. Don't use the same password for Telltale that you use for anything particularly important. (Though it's a good policy to use a different password for every site anyway.)
This discussion has been closed.