New User Forced Password Change or Invitation Email
When creating a user account for a client, I have to set their password, send it to them and then request that they then change it themselves.
Ideally, I'd like to be able to set a flag forcing the user to set a new password on login. Either that or perhaps create the user account via email invitation where the invitation link brings them to a page for password creation.
These are new features that are being worked on and inline for v4. including complex password enforcement and public user registration.
At the moment we have a global password expiration setting under administration--->system settings-->password settings.
For now, you can use a simple workaround that I have used. I create an account for a user with a generated password which I discard. I then logout and do a forgotten password on that user. The user will receive an email with a link where he has to set a password of his own.
@craigweb Ah awesome! Thanks Craig.