**No, the password should not even be in the email in the first place.** At my place of work, one tells the login ID to a user and requests the user **to call IT** to obtain a temporary password.

There are some other security considerations to think about. 

 1. If your company has the robust technology to support it, passwords should be **encrypted using a strong algorithm** such as AES

 2. **Secure emails with sensitive information should be digitally signed so that the recipient can verify the authenticity of the sender.** A one way hash function is applied to the email message and a private only you know is used to encrypt. Once the receiver uses your public key to decrypt, the resulting message hash should be the same. Otherwise, message integrity is lost and cannot be trusted.

The above ensures that the email has not been tampered with in transit, such as through MITM. 

 3. You might consider masking the data when displayed for extra security.