Read more

Best Practice: Creating User Accounts Without Sending the Password

Dominik Schöler
March 23, 2020Software engineer at makandra GmbH

In applications without a sign-up, user accounts are usually created by an admin. This imposes two challenges:

  • How to transmit the password securely and
  • How to make the user change the initial password immediately
Illustration online protection

Rails professionals since 2007

Our laser focus on a single technology has made us a leader in this space. Need help?

  • We build a solid first version of your product
  • We train your development team
  • We rescue your project in trouble
Read more Show archive.org snapshot

There is a simple solution: create the account with a secret password, then ask the user to use the password reset with his user name.

Posted by Dominik Schöler to makandra dev (2020-03-23 14:04)