# When sites ask for your email address to register, and ask for your password **URL:** \ **Category:** Factual Questions\ **Created:** [April 10, 2020, 2:58am UTC](https://boards.straightdope.com/t/when-sites-ask-for-your-email-address-to-register-and-ask-for-your-password/851478 "2020-04-10T02:58:25Z")\ **Posts on this page:** 10\ **Page:** 2
**Author:** ![Telemark](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/telemark/32/372_2.png) [@Telemark](https://boards.straightdope.com/u/Telemark)\ **Post date:** [April 10, 2020, 5:12pm UTC](https://boards.straightdope.com/t/when-sites-ask-for-your-email-address-to-register-and-ask-for-your-password/851478/21 "2020-04-10T17:12:10Z")
> [@drad\_dog](#): > > See above. They wouldn’t accept a “new” password. I seriously doubt that was what was actually happening. Most likely either your password didn’t meet their requirements or your email was already on file from a previous account you set up and you weren’t using the same password you did the last time. Some sites do want your email password to get access to your contacts. There can be reasonable situations where that is beneficial, such as importing a large number of contacts to LinkedIn or Facebook if you deem that useful. It’s not useful to me, but by itself it’s not an outrageous feature. ---
**Author:** ![Andy\_L](https://avatars.discourse-cdn.com/v4/letter/a/c67d28/32.png) [@Andy\_L](https://boards.straightdope.com/u/Andy_L)\ **Post date:** [April 10, 2020, 5:18pm UTC](https://boards.straightdope.com/t/when-sites-ask-for-your-email-address-to-register-and-ask-for-your-password/851478/22 "2020-04-10T17:18:06Z")
> [@drad\_dog](#): > > OP here. To clarify: My experience was that it wanted my email address to use for my name, to ID me, for the purpose of registering me to purchase on their site. If I enter a newpassword I get the message that it is wrong, and to enter a “correct” password. To me this means they want my actual password, and I can’t make one up. > > Maybe I’m wrong and I just need to put dummy entries in in a way I haven’t seen. Can you identify a site that did this. ---
**Author:** ![Thudlow\_Boink](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/thudlow_boink/32/320_2.png) [@Thudlow\_Boink](https://boards.straightdope.com/u/Thudlow_Boink)\ **Post date:** [April 10, 2020, 5:21pm UTC](https://boards.straightdope.com/t/when-sites-ask-for-your-email-address-to-register-and-ask-for-your-password/851478/23 "2020-04-10T17:21:10Z")
> [@drad\_dog](#): > > OP here. To clarify: My experience was that it wanted my email address to use for my name, to ID me, for the purpose of registering me to purchase on their site. This is very common. They need a way to identify you, and they probably also need a way to communicate with you (to send you information about your order and, unless you opt out, advertisements in the future). > [@](#): > > If I enter a newpassword I get the message that it is wrong, and to enter a “correct” password. To me this means they want my actual password, and I can’t make one up. What, exactly, did it say was “wrong”? There are several possibilities: 1. You had already previously set up a password _for that site_, and the one you were trying to use didn’t match the one they already had on file for you. 2. They were asking you to create a password, but the one you tried to use didn’t match their requirements. (Often passwords are required to be a certain length, or to contain a certain mixture of types of characters (upper- and lower-case letters, digits, etc.).) 3. You were asked to create a password and then type it in again to verify that you hadn’t mistyped it, and the two didn’t match. ---
**Author:** ![drad\_dog](https://avatars.discourse-cdn.com/v4/letter/d/aeb1de/32.png) [@drad\_dog](https://boards.straightdope.com/u/drad_dog)\ **Post date:** [April 10, 2020, 5:51pm UTC](https://boards.straightdope.com/t/when-sites-ask-for-your-email-address-to-register-and-ask-for-your-password/851478/24 "2020-04-10T17:51:00Z")
OK. I’ll check this more on logon vs register. Some sites of medical stuff are not registering new customers at all, and can glitch on that. ---
**Author:** ![AlsoNamedBort](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/alsonamedbort/32/3213_2.png) [@AlsoNamedBort](https://boards.straightdope.com/u/AlsoNamedBort)\ **Post date:** [April 10, 2020, 7:06pm UTC](https://boards.straightdope.com/t/when-sites-ask-for-your-email-address-to-register-and-ask-for-your-password/851478/25 "2020-04-10T19:06:57Z")
> [@Chronos](#): > > While **Grrr!** could have just ignored that request, I’d assume that any credit card company doing something as security-blind as asking for banking passwords is probably doing other stupid things with their security, too, and that it’s thus safest to have nothing at all to do with them. Just to let you know, this is becoming more and more common. I work for a major lender and we allow you to verify your assets by using a 3rd party service that uses your online login information to validate. [https://www.formfree.com/accountchek/](https://www.formfree.com/accountchek/) Most major banks (Chase, Wells Fargo, etc.) probably offer this service. If you don’t want to do any business with a company offering this service, you might as well start stuffing your money under your mattress. ---
**Author:** ![ftg](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ftg/32/2801_2.png) [@ftg](https://boards.straightdope.com/u/ftg)\ **Post date:** [April 10, 2020, 8:28pm UTC](https://boards.straightdope.com/t/when-sites-ask-for-your-email-address-to-register-and-ask-for-your-password/851478/26 "2020-04-10T20:28:10Z")
One reason to be getting a “wrong” password on a site you (think you) are newly signing up for is that some bot already signed “you” up on the site with some random password. Sadly, an amazing number of respectable sites allow bots to sign up using someone else’s email address without going thru email verification. (One that is particularly annoying is Paypal. Someone created an account using a secondary email account of mine. I got Paypal to lock the fake account, but I couldn’t get them to remove it completely. AT&T allowed someone to use one of my accounts as “their” email for a cell phone. I’ve been getting monthly statements and such for a couple years on this one. AT&T has no mechanism for me to do anything about this. I need to provide info I don’t have to change anything on the account.) Sometimes certain weaknesses are found in sites where Bad Things can be done at some point using such fake signups. E.g., they set up an account with a 2nd email or a phone number. Yours and theirs. You later signup (having to go thru password reset to get in). But you don’t notice the other stuff on the account and don’t delete it. Now the other person can waltz in a some point (resetting the password via the other things) and access whatever data you’ve since connected to the account. One way to test this: ask for a password reset. See if you can then get into the account. If so, check all settings including emails/phone numbers/etc. while providing a brand new secure password. ---
**Author:** ![Joey\_P](https://avatars.discourse-cdn.com/v4/letter/j/919ad9/32.png) [@Joey\_P](https://boards.straightdope.com/u/Joey_P)\ **Post date:** [April 10, 2020, 9:53pm UTC](https://boards.straightdope.com/t/when-sites-ask-for-your-email-address-to-register-and-ask-for-your-password/851478/27 "2020-04-10T21:53:16Z")
> [@ftg](#): > > I’ve been getting monthly statements and such for a couple years on this one. AT&T has no mechanism for me to do anything about this. I need to provide info I don’t have to change anything on the account.) Can you go to AT&T’s site and hit the ‘lost my password’ button? Since you have access to the email address, you should be able to reset the password. From there, you could either wait until the person tries to log in again, at which point they’ll have to reset their password, which will involve having to call AT&T because they’re not getting the password reset links. Now, as I think about it, it might be particularly funny if, upon getting the password reset emails, you changed the password. The account owner will probably try it a few times, give up, call AT&T and have a really confusing conversation. ---
**Author:** ![ftg](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ftg/32/2801_2.png) [@ftg](https://boards.straightdope.com/u/ftg)\ **Post date:** [April 11, 2020, 1:32pm UTC](https://boards.straightdope.com/t/when-sites-ask-for-your-email-address-to-register-and-ask-for-your-password/851478/28 "2020-04-11T13:32:54Z")
> [@Joey\_P](#): > > Can you go to AT&T’s site and hit the ‘lost my password’ button? Since you have access to the email address, you should be able to reset the password. Nope. In addition to the email, they ask, _as I specifically mentioned_, for other information to do this. (Just to note: I was a professor of Computer Science. So when I say it couldn’t be done this way, trust me.) It is so weird, they don’t allow you to do a simple password reset my email since that’s not so secure, but they don’t send an email verification when the account is set up to ensure that the email belongs to the customer. ---
**Author:** ![TheCuse](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/thecuse/32/2854_2.png) [@TheCuse](https://boards.straightdope.com/u/TheCuse)\ **Post date:** [April 11, 2020, 7:37pm UTC](https://boards.straightdope.com/t/when-sites-ask-for-your-email-address-to-register-and-ask-for-your-password/851478/29 "2020-04-11T19:37:00Z")
^^I have that exact same problem. I even contacted AT&T to have my email removed from that account, but they said there was nothing they could do. So I set up a filter and into the trash the emails go. ---
**Author:** ![shuok2019](https://avatars.discourse-cdn.com/v4/letter/s/e8c25b/32.png) [@shuok2019](https://boards.straightdope.com/u/shuok2019)\ **Post date:** [June 4, 2020, 4:26am UTC](https://boards.straightdope.com/t/when-sites-ask-for-your-email-address-to-register-and-ask-for-your-password/851478/30 "2020-06-04T04:26:41Z")
This post was flagged by the community and is temporarily hidden. [Previous page](https://boards.straightdope.com/t/when-sites-ask-for-your-email-address-to-register-and-ask-for-your-password/851478.md?page=1)