Please Don't Email Me My Password

[vaperature]

I've had two juice vendors send me an email after creating an account on their sites in which they include my username and password. I've never had this happen before with any vendor of any type ever. I don't want my password right there in an email for anyone who happens to be looking over my shoulder or who hacks into my inbox to see. Plus I use a variation of the same password for a lot of different accounts so if someone got a hold of one password they might be able to figure out my other passwords. Please, vendors, don't insult my intelligence. Do you really think I would sign up for an account and not make note of my own password? And even if I did forget my password for some reason, just have a link at the site where it says "Forgot your password?" like every other site has. Send me my password when I ask for it, if I ask for it. Thank you.

 

[retired1]

Some shopping cart packages automatically do this. Supplier can't do anything about it.

And if you're using the same password on multiple sites, you're just begging to be compromised. Don't blame the vendors for your own lack of proper security practices.

 

[vaperature]

Some shopping cart packages automatically do this. Supplier can't do anything about it.

And if you're using the same password on multiple sites, you're just begging to be compromised. Don't blame the vendors for your own lack of proper security practices.

With all due respect what a silly response. The vendor chooses what "shopping cart package" they use so OF COURSE they can do something about it. And I didn't say I was using the same password on multiple sites, but I'm like most people, I don't have one unique password for every site I sign up to--I'd have to have 500 different passwords. I said I use a "variation" of the password. And talk about "lack of security practices"--how about sending an email with my password blatantly right in it? They don't know where that email is going. What if it a shared account? What if it is a business account where upper management has access. I don't know why every time I point out how vendors can improve their operation, someone has to come in here trying to tell me I'm the one responsible for it and that I shouldn't expect more from the vendor. With all due respect.

 

[bluecat]

hmmm. of the countless government websites I am a member of in some form... They all email me a password. It is the email I specified. I do use them for the field I am in. I like it.

Ummm.. do not share email accounts... Don't use a business email account for personal purposes.... I can't believe the # of people that use business for personal... and then have the nerve to tell the business they can't look at that email because it was personal...

 

[mare ze dotes]

Sorry I don't have much to say but I do agree with you. That is a bit scary. I have had it done but it was gaming/online game stuff. I backed away real fast.

 

[retired1]

With all due respect what a silly response. The vendor chooses what "shopping cart package" they use so OF COURSE they can do something about it. And I didn't say I was using the same password on multiple sites, but I'm like most people, I don't have one unique password for every site I sign up to--I'd have to have 500 different passwords. I said I use a "variation" of the password. And talk about "lack of security practices"--how about sending an email with my password blatantly right in it? They don't know where that email is going. What if it a shared account? What if it is a business account where upper management has access. I don't know why every time I point out how vendors can improve their operation, someone has to come in here trying to tell me I'm the one responsible for it and that I shouldn't expect more from the vendor. With all due respect.

1. You shouldn't be using a shared account for business transactions. Goes right back to security.
2. Business account? Does your boss know you're using business assets for personal stuff?

Again, don't blame vendors for things that you ultimately have control over.

Closing this. Because 1) it's not up to the online business to ensure you use proper security practices, and 2) see #1.