cancel
Showing results for 
Search instead for 
Did you mean: 

Letter containing plaintext password

sjmelnikoff
Newbie
Posts: 1
Registered: ‎17-04-2013

Letter containing plaintext password

I recently received a letter, welcoming me to my new account, which contained part of my password in plaintext.
It's previously been commented on this forum that it's not advisable for organisations to be able to decrypt customers' passwords; see also here, here and here. It's also a bad idea to send someone's password in plaintext via e-mail.
So although sending only part of a customer's password via post isn't as bad as sending all of it, it weakens security for little or no benefit.
I would strongly recommend that PlusNet stop doing this in future communications.
2 REPLIES 2
Chris
Legend
Posts: 17,724
Thanks: 600
Fixes: 169
Registered: ‎05-04-2007

Re: Letter containing plaintext password

I've flagged this letter in to a team here that's looking into the automated customer emails and letters we send, I'll continue to follow this up with them.
Former Plusnet Staff member. Posts after 31st Jan 2020 are not on behalf of Plusnet.
currant101
Dabbler
Posts: 11
Registered: ‎26-04-2013

Re: Letter containing plaintext password

Plusnet did this to us as well.  Very unprofessional and shows the contempt plusnet have for customer's security.