You have a few options: 1. Check [url]http://plaintextoffenders.com/[/url], which lists websites that do this kind of thing and will give you some examples of what to look out for. 2. Try resetting your password. If they send you an email that has your password in it (even if it's a newly generated one), it's insecure. If you check the more thoroughly-designed services like Google Accounts, they'll send you a link in an email that directs to you to a page on their site to reset your password. That's how it should be done. 3. Try creating a new account or changing your password. If there are [url=https://defuse.ca/password-policy-hall-of-shame.htm]weird or really restrictive policies[/url] in place on the kinds of passwords you're allowed to use (as in, what characters are allowed, minimum length, maximum length, etc...), there's a good chance they're not doing it properly.