3 wrong approaches towards UX/Security 1. Extracting username from email 2. Extracting password from email and setting it same as username 3. sending password in plain text email.