You're still doing it wrong. When I reset my password for opensubtitles.org a password is emailed to me in plain text. So my password is or was known on your systems in plain text (because, you know, email), and is now stored on my email server and in my email client in plain text, and that's just p...