# Force password change after login

**URL:** <https://meta.discourse.org/t/force-password-change-after-login/85202>\
**Category:** Product Support\
**Created:** [April 13, 2018, 12:11am UTC](https://meta.discourse.org/t/force-password-change-after-login/85202 "2018-04-13T00:11:09Z")\
**Posts on this page:** 1\
**Showing post:** 8

<div class="post-metadata">

**Author:** ![blake](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/blake/32/157322_2.png) [@blake](https://meta.discourse.org/u/blake)\
**Post date:** [December 2, 2020, 7:44pm UTC](https://meta.discourse.org/t/force-password-change-after-login/85202/8 "2020-12-02T19:44:04Z")

</div>

Instead of creating a user with a default password you should create the user with a random password and never send it to them. Then they can use the forgot password link on the login page to reset their password first before logging in.

---

_[View the full topic](https://meta.discourse.org/t/force-password-change-after-login/85202)._