Always be cautious with sending sensitive information such as passwords. Use HTTPS whenever possible and consider additional layers of security like OAuth for authentication.