AFAIK this is still the case, try to get a hashed password mailed to you.

update

Hey there.

You or someone else has requested a password for your username or e-mail 
address. 
Before you freak out, take a few deep breaths and remember that it's YOU
and not THEM who is getting this password.


Here's your info:


username: merlyn
passwd: LanXRulez
human name:  Randal L. Schwartz


love, the management
http://perlmonks.org/

Doesn't scare me in the slightest and never did. The site doesn't have my social security or any banking or credit or non-public personal info or keychain access or certs to anywhere and does not represent any security threat at all unless I use the same credentials and password elsewhere. I've done a lot of stupid things in my day but not that one. Though I was able to skate on a five letter dictionary word as my amazon.com password for a few years… :P

The best strategy here is a generated cryptic password.

I don't need it to be easily remembered as long as I can get it mailed.

Cheers Rolf
_{(addicted to the Perl Programming Language and ☆☆☆☆ :)
Wikisyntax for the Monastery}

I started using GUIDs (with a very minor transform) as my default password at new sites a couple years ago.

there was a breach

What happened?

your perlmonks password was stored in cleartext in the database (not hashed)

And it still is, almost 9 years later. Anger Management

Alexander