That tends to degenerate into resetting the password every time, or logging in from the password reset email you sent them. In either case, you've moved securi

That tends to degenerate into resetting the password every time, or logging in from the password reset email you sent them. In either case, you've moved security to the user's email program which is (sadly) probably an improvement.