Facebook always think of their users' safety, which is why they must be securely sending passwords as an attachment

What would we all do without Facebook’s proactive and user-centered approach to security? They’re so thoughtful, they created a new password for me, put it into a zip file and sent it to me in a private one-to-one email. They go out of the way to help their users and yet, there are some people who speak poorly of Facebook and their boss dude. And these Facebook guys must work incredibly hard. If you look carefully, this email was sent out in 2009 and I just got it yesterday. When you have tens of millions of users, emails are going to take some time to send out.

The only weird thing about the email I got was when I replied to thank Facebook for their help and to ask why my new password slowed down my computer, the reply address was not a Facebook email but some strange swordingnq825@talksecurity.com.

Their password and security team must be some standalone entity or something.