Have you ever scoped a task to be a certain amount of time and at the end of that scoped time asked for more time because you think you can still achieve what you are trying to do but after the extra time has expired, you find out that the task is near impossible?

What do you tell the client?

An IT guy told me during a phone meeting set up to talk about how he builds these web forms on a dumb CRM for a client of ours that he has been an IT professional for 25 years.

He says he doesn't know much about the codey stuff.

What do IT professionals do again?

Has anybody been forced by a PM or someone else to send clients passwords via email?

How should I tell them it's not best practice even if they are insisting?

Clients never have login credentials to their stuff, do they?