password in email confirmation of registration

Question

When a customer signs up on my site, it receives a confirmation of registration which it is written the username and password. Is it regular to have the password in plain text in email?

Answer 1

UPDATE: I just noticed that as of Magento CE 1.9.1.0 the password is no longer included in the Welcome Email. The default email template still contains <strong>Password</strong>: {{htmlescape var=$customer.password}}, but as part of several security enhancements customer passwords are no longer stored in plain text in the database. Therefore the email will display a blank space where the password used to be. So my answer below is only applicable to Magento CE 1.9.0.1 and older.

Yes, this is was standard procedure. In app/locale/YOURLANGUAGE/template/email/account_new.htmlaround line 25 you will find:

<strong>Password</strong>: {{htmlescape var=$customer.password}}

Option 1: You can change this by changing this email template and either remove this line or replace it with something like:

The password you have chosen when creating this account.

Option 2: You could also create a new email template in the Admin Panel via System > Email Templates and then set this new template in System > Configuration > Customers > Customer Configuration > Create New Account Options > Welcome Email