thomas-sports.com
Parachute equipment
They send you your password in plaintext after you register. On the plus side, they don’t send you your plaintext password if you click on the forgot password link, so maybe they don’t store it in plaintext.
cityofsacramento.org, i-doxs.net
City government
Oh, and worst of all they have tolower() all of their passwords!!! (no I am no joking).
Editor’s Note: This is not the first i-doxs.net website we’ve seen. Looks like they provide sites for a few city departments at least in California, USA.
thaipod101.com
Language learning
They keep sending me my password as plain text when I didn’t even request it… just sending it as part of their standard marketing emails.
mono-software.com
Software company
Their MonoX CMS stores user passwords in plaintext for any Admin user to view & edit
Editor’s Note: This is not a site, but a software product that stores passwords in plaintext. If you know of any websites currently using this product, please let us know in the comments.
textbookrush.com
Textbooks
On the “forgot password?” form, the site says:
Note: For security purposes we cannot send your original password.
A randomly generated password will be emailed to you.
No prompt to change the password once logged in with the new site-generated one.
brewersassociation.org
Trade group
They have emails and password of about 40,000 homebrewers and a couple thousand professional craft breweries.
foxrentacar.com
Car rentals
Sign up for their rewards program. Your reply includes the plaintext password.
