[Koha-bugs] [Bug 28980] Add temporary passwords which must be reset after first login

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28980

--- Comment #18 from Katrin Fischer <katrin.fischer at bsz-bw.de> ---
(In reply to David Cook from comment #17)
> (In reply to Christopher Brannon from comment #16)
> > So, maybe we direct first time users to the link (reworded or not) and they
> > set their password.
> > 
> > For patrons that don't have an e-mail, we have a set/reset option that
> > generates a temporary password, and prints a slip that directs them to a
> > page where they type in their library card number (not printed on the slip),
> > and they use that password.  Then it prompts them to reset the password. 
> > The slip doesn't have to be printed for over-the-phone resets.  We just
> > direct them to the page and give them the password over the phone.
> 
> With other systems in a public library context, usually a new user will be
> told "your password is the last 4 digits of your phone number" or something
> like that, and then when you log into the OPAC with that password, it
> prompts you to reset your password.

This doesn't feel like a good practice because it would encourage insecure
passwords and there is no guarantee the user will log in and change it anytime
soon?

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.