Not sure it matters too much for sites that have login page that aren't https, but better not to email people their passwords (clear text). It also indicates you're probably storing passwords in the clear, see http://www.codinghorror.com/blog/archives/000953.html