Feature Request: force password change

[amit177]

A feature to force a user to change their password on the next login could be really useful and improve security for passwords sent.

[joeldj-nl]

Account passwords should not be sent in plain text over email. Pterodactyl does not do this either. When a new account is created, the user receives an email with a link that allows them to set a password for their own account.

If your feature request is about rotating passwords to improve security, that approach goes against OWASP recommendations. See this article for more information.

[amit177]

In certain cases, you'll need to reset the user's account password manually and send them the password over some medium - usually plain text.
After the user already signed up - you cannot force them into the account setup page again.
A way to expire their password would solve this issue.

[joeldj-nl]

You're able to use the 'Forgot password?' feature for this, after which the user get's an email to reset their password.