Requiring password reset after "I forgot my password"

Hiya,

I don't like the way "I forgot my password" for members works because I think it's a terrible idea to put a clear text password in an email. I'm assuming I can't change the way that works. But I'd like to set up my forum so that if a member uses the "I forgot my password" link and gets an email with a new password, he would be required to change that password the next time he logs in. Is this possible?

Also, I just registered for this site and you sent me my password in an email. This is a really bad idea! I would be curious to know why you do that, especially since I get other clues that indicate you're trying to have a secure site (like rating the strength of my password). What gives?

Thanks,
Nancy

You are correct. You can not change the email.

Most sites send your password in an email.

OK, I can't change the email. Is there a setting I can change so that members are required to change their passwords on the next login?

I respectfully disagree with "most sites send your password in an email". In my experience most sites send a link to a page that allows a new password to be entered.

Thanks again...

svadmin wrote:I respectfully disagree with "most sites send your password in an email". In my experience most sites send a link to a page that allows a new password to be entered.

for the sites i go to, its about 50/50

There is not an option to make members change their passwords.  You can inform your members that you want them to change their passwords.

Are you referring to resetting their passwords, or when they register?

I'm talking about when they ask for a password reset. You send an email with a new password, then the user logs in with the new password, then the user would be redirected to a password reset screen.

I have not see anything that will make them create a new password after logging in with a reset password.

OK, thanks.