Alright I can see that my collegue Daniel might have been a bit confused about our general setup, but before people start jumping to conclusions I feel that it is important to note that the password sent to the email, is ONLY for the webui and ftp access, it does not provide access to anything else, furthermore the password is a randomly generated password, no client can actually pick a password during signup, the login details for the clientarea is not sent via email to anyone and it is a password set by the client. After the initial setup the password can be easily changed via the clientarea.. "This is certainly true when the connection is through HTTPS but it's important to note that not all of the website has a HTTPS certificate on it (most notably when logging into the ruTorrent client). "

That statement is just directly false, our entire website, clientarea, webui and ftp access is protected by SSL, if you did not notice that it is included in the email that you received, the only reason that we even send a non-ssl link in the email are for legacy purposes.

We could naturally do this in a different way, no one is perfect.