Yes but you should make that random password a reset password that starts becoming valid only once used and sends the user directly to a new page where he can c

Yes but you should make that random password a reset password that starts becoming valid only once used and sends the user directly to a new page where he can change his password