Texting a password… good or bad?

screenshot

There is some great utility to be had by deploying SMS into the customer interaction stream. What’s your view on sending passwords by text? See the above screenshot.

Whilst it’s really convenient, surely it’s bad practice to send passwords in clear text sms messages?

Although, I suppose, if you’re 3 and you’re sending to a 3 device, at least there’s a degree of security there — since it’s their own network they’re using to transmit. It’s not entirely secure though.

It’d be fine for one-time passwords…

  • I've had a Sprint CSR (an actual human, supposedly) want to do this as well. And then completely fail to understand why it wouldn't really work.
  • Barry-Jon
    I had this exact scenario - new f'in ace modem from Three. Signed up for My3 and they texted me the initial setup password (one time use). The modem & software can send and receive text messages. Not a big deal imho.
  • Errr... I don't know about 3, but the Vodafone 3G cards have a utility which allows you to send and receive SMS from your computer. Are you sure that 3 don't provide some software to do that?

    SMSing a password is more secure than emailing it. Anyone between you and the sender can, potentially, read an email. Also, if you're using a Top-Up service, you probably want to make sure that the person is actually in possession of the handset.
blog comments powered by Disqus

Powered by Interactive Energy | Sign up to The Application Review newsletter