Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

For the best security, your own passwords should be difficult to guess but easy for you to remember and as lengthy as you can comfortably manage within the constraints. 

The best policy is for users to always set their own passwords, but this is not always possible. In those cases you should avoid (so far as is practical):

...

The safest way to reset user passwords is to trigger a reactivation an activation email and let the account holder do it themselves.

...