WARNING! "Create new password" reveals existing!

To anyone managing accounts for other (untrusted) users, BEWARE that the Web Panel option :

  • If you’d like to have a new password created
  • [Email me my NEW password]

does nothing of the sort - it mails the EXISTING password!! (to whatever is the current contact address).

And despite saying “We changed your DreamHost Web ID’s password”, it does not change it.