- Issue created by @pameeela
- 🇦🇺Australia pameeela
We can still discuss but I think making the change is blocked by ✨ Allow per-site configuration of 'Notify user of new account' default setting Active and because we really need that to default to on for this to work properly. We also need email sending to work, which is 🌱 Handle sending email in Drupal CMS Active .
- 🇸🇰Slovakia poker10
Sending plaintext passwords in email is not considered a best practice and that was the reason, why password tokens were removed from core in #660302-64: Migration path for changed user email tokens; don't complicate translation of default messages → . Do we really want to send passwords in email in Drupal CMS by default?
We have the password reset links just for this specific use-case, so that passwords are not leaked to emails and 3rd party services parsing emails.
If we plan to use the https://www.drupal.org/project/genpass → module just for the password generation, I think that will be OK. Thanks!
- 🇦🇺Australia pameeela
Per #3481627-15: Allow per-site configuration of 'Notify user of new account' default setting → we are not proposing to send passwords via email. This is a workaround for the current requirements and limitations of core.
- 🇺🇸United States phenaproxima Massachusetts
Re-titling to reflect the fact that there are two blockers.
- 🇦🇺Australia pameeela
We addressed this in ✨ Improve manual account creation process Active
