[wp-trac] Re: [WordPress Trac] #9710: Add change-password nag for auto-generated passwords

[WordPress Trac]

#9710: Add change-password nag for auto-generated passwords
------------------------------+---------------------------------------------
 Reporter:  DD32              |        Owner:  westi 
     Type:  enhancement       |       Status:  closed
 Priority:  normal            |    Milestone:  2.8   
Component:  Administration    |      Version:  2.8   
 Severity:  normal            |   Resolution:  fixed 
 Keywords:  has-patch commit  |  
------------------------------+---------------------------------------------

Comment(by dd32):

 @demetris: You're right that my use-case is a rare one. However, Users
 signing up to a wordpress install and recieving a random password IS a
 common scenario, Sure, most of us have closed installsm but there are a
 fair few that allow signups.

 Random passwords are just as secure as a decent password, 'abc123' is not
 a decent password. Nor is quite a lot of passwords the majority of us use,
 but hey, We all change random passwords to those which we can remember
 better. Some of us like security, and generally will make sure that our
 passwords cannot be guessed easily.. Thats our choice - to make a secure
 password. Theres nothing stoping someone choosing that and with an extra
 mouse-click, dismissing the dialogue - They dont loose any time, nor does
 it add a high user-overhead.

 Personally i'd have also suggested a choice during install to either set a
 random password or one of my own choosing (without adding files... or
 using a 3rd-party installer) - But i'm sure there'll be some who would be
 against that as well.

 Worried about security? Set a decnet password (Longer than the random one
 auto-created, And while you're at it, Delete the admin account and create
 a new user. If you want simplicity and ease of use for all users, then in
 my opinion, This is just one of the few parts that make the UI nicer to
 use.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/9710#comment:23>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software