https://imgur.com/a/3iekMAj

So, the emails to reset your password will be clear text and vulnerable to be read by your email provider.

It worked by uploading your public key in your settings.