I once worked a place that required me to have access to a very confidential database. To "protect against hackers", they changed the (collective) password every week and sent me the new one in open text to my webmail account. 😳