How should I ethically approach user password storage for later plaintext retrieval?

Answer 1

What about emailing the plaintext password upon registration, before getting it encrypted and lost? I've seen a lot of websites do it, and getting that password from the user's email is more secure than leaving it around on your server/comp.