Also, single-login links should automatically expire the password upon first login, lock user into password change page until he/she successfully changes it. Not doing so opens so many ways to get locked out of a newly created account... that is a very bad first impression that turns our first-time site users away. We need first time users to stay!

Comments

iva2k’s picture

iva2k commented

OT: Oh boy, I got a long list of issues submitted in today for password_policy...

That does not make me not like the module. It is a first-class addition to drupal. Having all these new features will make it so sweet and right that nobody would be able to live without it.

erikwebb’s picture

erikwebb commented
Status: Active » Closed (duplicate)

Semi-duplicate of #574180: 1st change of password should ignore time limits