[wp-trac] [WordPress Trac] #24633: Allow admins to generate and send new passwords for users

[WordPress Trac]

#24633: Allow admins to generate and send new passwords for users
---------------------------------+-----------------------------------------
 Reporter:  mordauk              |       Owner:
     Type:  enhancement          |      Status:  new
 Priority:  normal               |   Milestone:  Future Release
Component:  Users                |     Version:
 Severity:  normal               |  Resolution:
 Keywords:  dev-feedback has-    |     Focuses:  javascript, administration
  patch                          |
---------------------------------+-----------------------------------------

Comment (by folletto):

 As the above, I've tried to come up with an integrated concept, trying to
 balance in a single solution all the issues discussed above. Here's
 attached above the "Universal Overlay" concept:

 1. The UI is designed as a modular component: abstract from its context,
 but with a visual design that fits in every (hopefully) WordPress context.
 In the above you see it used both in wp-admin and in the login page (note
 that the width stretches to match the text-field, so it's designed to fit
 the smaller of the two).
 2. The field starts blank, so as a user you don't have to read information
 that you need only when you start typing. The idea is to have the clean
 field, that expands with the overlay and the password hint once it gets
 focused. This introduces some moving of the fields around, which is not
 ideal, but I feel the benefits outbalance that slight movement.
 3. By default we use "Visible", so there's just one field. Better to avoid
 mis-typing frustration, and avoids using a negative-for-positive meaning
 UI ("check to hide" vs "check to show").
 4. If "Visible" gets unchecked we animate the second verification line in
 (fold-open animation), empty.
 5. Visible and Generate go hand by hand: clicking generate turns on
 automatically the visibility, and un-checking then the visibility checkbox
 shows the verification field empty, so you have to type the generated
 password to make it validate.
 6. If JavaScript is off we still get a single field that works (with a
 visible password), so it's still functional.
 7. The strength indicator uses the padlock icon to reinforce the security
 theme (I know, this sounds silly, but there are studies showing that the
 icon of a padlock helps perceiving a form more secure).

 That's all I came up with. I feel it's a good direction, even if maybe
 there are some details that need more fine-tuning. :)

 I hope this helps. :)

--
Ticket URL: <https://core.trac.wordpress.org/ticket/24633#comment:96>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform