Affiliate Programs: Stop Sending Passwords in Email
 

...UNLESS an affiliate clicks the 'forgot password' link on your site. :Oh crap

We don't need a welcome email with the password.

We don't need the password in gallery update emails, or other promotion updates.

STOP!

PLEASE!

I personally prefer it in the welcome email, but nothing after that.

They've been doing it for years. Never quite understood the mentality of it :)

I agree here.

nothing wrong with receiving it in the welcome email... if you don't want to keep you can just delete it...

They shouldn't be store passwords anyways, they should store a hash

I am self-taught in the ideals of something which I don't understand, and as a registered voter, here is my opinion:

Anything worth half a shit has things stored as a hash, not the 'original'; NATS has done this for at least the last 3 years by default.

Exactly, I am surprised they would be storing plain text passwords. :2 cents:

Just set up a catch all email for any domains you buy, watch what you get.
Yet another major reason I use gmail for things.

agree as well

Maybe they like some1 to hack your account ;-)

I just can speak for our program, we are not sending passwords automatically, sure after signup and if the webmaster asks for it but not in Newsletters, announcements or something like that.

i'm the third person to agree to this.

also: a sponsor that stores password in plain text and not a one way encrypted hash should be dragged out to the street and forced to watch carrot top's videos

All NATS programs have these stored as an encrypted hash, but it can be sent in the welcome email as most people tend to prefer. I fully agree that plain text storage is nothing but bad news.

Yep, I like to have all my account details filed in Gmail. What I really hate is when you have to create some insane kljfen2l3kj43 password for 'security' purposes, when you could easily have your password figured out from other ways besides cracking.

Ok, a lot of people like to be reminded of their passwords in their welcome email. Personally, I remember the password that I used and save it in roboform and forget about it. So, I don't need to be reminded 1 minute after I made the account.



But it really is crossing the line of security when a program sends you gallery updates and also say something like, "in case you forgot your login, here it is is plain text for pretty much anyone to see!".

Especially since I've seen AT LEAST 2 separate times where a program sent me an email that was intended for another email address.

No, the emails had NO login info. BUT, you know it definitely has the potential to happen and you will probably never even know about it.

I've never seen my password posted outside a "thanks for signing up, here are your login details" email, who the hell does shit like that?

Cash Traffic sends login and password in EVERY SINGLE EMAIL that they have sent me so far. :Oh crap

There's a couple more programs that do it, but I don't have their emails saved to make sure I'm naming the right companies.