[tomjen3]

Hell yeah it is less secure. password, letmein, 123456, j@nuary1

All bad passwords. All will be chosen by your users at some point. The last satisfies any complexity requirements I have ever run against in the wild.

There is nothing insecure about sending a plain-text password that compares to a badly chosen password -- email isn't that easy to intercept and properly nobody is hacking your users physical (or wireless) network. At least not compared to the number of people who will be attempting to crack their online password.

[sunchild]

"email isn't that easy to intercept and properly nobody is hacking your users physical (or wireless) network".

If you actually believe this, then we will never be in agreement.