Best Temp Pass Autoresponder?

[Bob Sneidar]

What about the sites that ask you to enter a new password after sending you a temporary one?

Bob S


> On Jul 13, 2019, at 12:27 , Alex Tweedly via use-livecode <use-livecode at lists.runrev.com> wrote:
> 
> It's kind of hard to answer that without knowing how your passwords are set up and managed already, or what/how you need to use or check them.
> 
> So I won't answer directly, but offer a sideways suggestion ....
> 
> Don't have passwords.
> 
> Nearly all sites that have passwords offer some kind of recovery mechanism - which almost always uses a (verified and registered) email address to send a recovery link. So just skip the step of having passwords at all  - and have a mechanism that users can type in their email address, and be sent a short-lived, one-time use link to their email address.
> 
> When requested you generate a token, store that in your database (or whatever), and then send an email that might look something like ...