Here’s what I want to know: How are they storing our passwords? We’re giving them the login details to our email accounts, and they haven’t told us how they’re storing them!

I assume they aren’t in plain text (they’d better not be!), but how does their widget work, then? They can’t just decrypt an md5 hash when they need to access your account (or can they, somehow?). If they’re encrypting the passwords, how are they going about it? Are they using a salt? Are they using md5 or sha1? How secure is the server these passwords are sitting on?

Obviously they can’t tell us everything, as that would be a security risk. However, I think we should know a few things about how are email login details are being stored.