Register reader Alfie Fresta asked to write down his Oyster account password on form. TfL says it doesn’t store passwords and lets customers take the form away afterwards. Staff at New Cross Gate station handed him a form with a box on it asking for his online account password. He says he was in ‘utter disbelief’ that this is standard procedure for staff adding discounts to Oyster cards. Transport for London says it is looking at ways to improve its processes. Customers advised to change the password on first login, if setting up an online account.
Source: https://www.theregister.com/2019/08/27/tfl_oyster_cards_plain_text_password_form/