Force users to change password at first login

By serval-1 on 27 Oct 2005 at 14:36 UTC

We have installed a new drupal site (4.6). Users are creating there accounts, but I found out that many users are asking for a new password after a week or two. They are also posting frequently with the anonymous account.
I suspect that they are losing the password the received nor they are changing the password.

Is it possible to force the users to change the password at the first logon? Then they are obliged to think about a password that they hopefully will not forget.

Comments

Coming soon???

xopher commented 29 October 2005 at 04:56

I understand why the passwords are generated and emailed (it's a good default policy for Drupal to have) however, flexibility is also key. I've hacked registration to AUTO-LOGIN the user upon completion (so they just have access immediately) as my client doesn't want their customers leaving the site to go fetch a password from email (each barrier affects conversion rates, trust me.) We of course run the risk of having BAD emails as a result, but that's not really as important to us as a smooth user experience and increased participation.

Ideally, we would like the user to either, 1) set their password during registration (overriding Drupal's default behavior) or 2) be prompted to change the password once logged in (which in our case is immediately after registering)

If we ever get it going, I'll be sure to post here. Incidentally, I noticed users created by Admins do not receive an email from the system and can have their passwords manually set by the admin, not auto-generated (doesn't even require double-entry.) So Drupal can already handle this at some level, it's just a matter of sorting it all out.