The discussion revolves around the requirement of a password for sign-in. nephilim75 wants to make password registration mandatory for invited users, but currently, the password field is optional. pfaffman explains that users can log in via email link without a password, and E.D and Terrapop also want to make password registration compulsory. However, JammyDodger points out that although the password is not required during sign-up, users are prompted to set one via email before activation. Furthermore, users can still bypass setting a password by selecting “Skip the password; email me a login link” and logging in via a link sent to their email.
Hej hej
currently the users will be invited. Following the invitation link the users will be guided to registration page. But the password field is not required. It is optional. What did I miss to get this enabled? I want that the users needs to register with password.
Kind regards
//neph
What gives that password field is optional?
I am afraid I don’t know what you want to know. 
They might want to log in by having an email with a link sent, so a password isn’t necessary.
Is there a way to change this? I want people to use a password.
Me too, setting a password should be mandatory for invitations. At least admins should be given this option to set.
Feeling like we may be missing something. Maybe the password is set for you when you dont fill in? Or it uses 2fa?
No. No password is required. I think even if two factor is turned on you can still login with a login link. Since you can always reset your password, you don’t need one.
I’ve just had a run through to check, and while the password is not required on the sign-up, if you leave it blank the email you get sent asks you to set one before you can log in/activate:
Though @pfaffman is right, you can indeed ignore that too, and go straight to log in and select “Skip the password; email me a login link” and you get a log-in link without the need to set a password. 
I suppose the key bit is that you follow a link from an email to verify your email address (activation, set password, log in link), and how you access the account afterwards is up to you.
