> Posting it to you is secure, as it's illegal to open someone else's mail. ^JGS (@virginmedia)<p>> There are a number of additional considerations you will need to take account of when designing your password system, such as the use of an appropriate hashing algorithm to store your passwords, protecting the means by which users enter their passwords, defending against common attacks and the use of two-factor authentication. [0]<p>Well, they're not admitting what they do is in any way unsafe, but it really seems like a cut-and-dried GDPR violation.<p>They really haven't met even the spirit of:<p>> Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.<p>[0] <a href="https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/security/passwords-in-online-services/" rel="nofollow">https://ico.org.uk/for-organisations/guide-to-data-protectio...</a>