There are lots of questions about recovering passwords on SO, but not about changing passwords considering one of the two following:
I was wondering what would be the safer option when users have forgotten their password Send a r开发者_JAVA百科andomly generated new password to the email address (all email addresses in my database