Built to be read and replaced
A temporary password has a short life: you create it, share it with someone, and they replace it the first time they sign in. It should be easy to read over the phone and type without mistakes, but random enough that nobody can guess it in the meantime.
The default of three capitalized random words, two digits and a symbol gives about 48 bits of entropy and satisfies most password rules on the first try.
Good practice for temporary passwords
- Set the account to require a new password at first sign-in.
- Share the password through a different channel than the username, for example the username by email and the password by phone.
- Expire unused temporary passwords after a day or two.
Frequently asked questions
How long should a temporary password last?
As short as possible. Ideally it works only until the first sign-in and expires within 24 to 72 hours if unused.
Why not use a fully random password?
You can. Word-based temporary passwords lead to fewer support calls because people read and type them correctly the first time.