Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If you have a google apps account, and you create an account for a user (or adminstratively reset their password for them) they will get an email like:

  Hi Tina,
  
  You have a new account at Example Association.
  
  Your username is tsmith. Your initial password is ZjAdhUVC
  (you will need to change this when you log in).
  
  Your new email address is tsmith@example.com
  
  You can sign in to Example Association services at:
  
  http://www.google.com/a/example.com


What's the issue? They force a reset so there is no difference between giving a temporary password like this or a URL which is unique to them?


(you will need to change this when you log in)

That's 'will need' not 'we ask nicely and you can ignore'. When you create a user, it gives the option of setting their password for them, or using a temporary password, which they have to change.




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: