IF people actually do that correctly, yes. But history has proven many sites (big and small) are quite happy to send you your plaintext password.