mojira.dev
MC-611

Clear password storage in atlassian

When I signed to Atlassian, I got this message:
"You have successfully signed up. If you forget your password, you can have it emailed to you."

IF Atlassian can email me my forgotten password :

It means Atlassian is storing my password in clear text:

  • Be aware of not re-using a password here

  • Should Atlassian be compromized, all account passwords could be exposed

Comments 2

This is not a Minecraft bug - however I did just test for the sake of curiosity. They do not email your password, merely a link so you can reset the password. Please use the contact admins form in future.

Thanks,

This was only a missleading message from the signup.

Oups and glad to see it is only a password reset and not my password emailed to me.

Léa Gris

(Unassigned)

Unconfirmed

Minecraft 1.4.1

Retrieved