We will never ask for your password in email - do not sent it to us, or anyone else
See How to verify a website identity to check this is the correct website.
You should see an SSL certificate issued to trmail.triumf.ca by RapidSSL CA with:
SHA1 Fingerprint=A4:CB:FE:C9:4E:21:31:A0:BA:48:4F:63:ED:4A:57:91:3A:21:FD:7C
MD5 Fingerprint=94:CC:EC:83:34:48:CE:04:98:76:CA:BA:1B:5C:BA:F5
If you do not, your mail is not secure and your password is at risk.
Desktop users are recommended to use an IMAP client such as Thunderbird to access their mail. POP3 is also available.