I think the password management should be redesigned for better security:

  1. Force user to set a new password on the page that opens when clicking the new user email verification link
  2. Allow changing passwords

Thanks!

Please, make it allowable for users to change their password. Many thanks.

would love to be able to change passwords

The email verification link is as secure as your email security and is single-use besides. The idea behind providing the password for you is to avoid someone changing their password to a truly weak one. The random strings that we generate gives a pretty decent compromise between usability and password entropy.

Aha... this explains why i can't find the place to change my password. I would think there would be more complaints on this topic.