PSA: If you use a Forgot My Password feature and they send you your password, that’s BAD. Companies should NEVER store customer passwords for any reason.
This has been my day in password security:
I went to pay the trash bill this morning, but forgot my password. I used the “Forgot my password” link, assuming they’d send me an email with a way to reset my password.
Nope. Instead, they sent me my password. This is a serious security concern, and especially since it’s linked to an account with payment information. Here’s more information about why this is bad: