I tried SO password recovery,

you enter your email and a captcha after you get an e-mail:

```
here's your password : aaa3437

just kidding, 

go to this link ....

```

is it considered a bad idea to generate a random password and send it to the e-mail ?

for example: 

```
1: send an email with a password reset link
2: click on the link, pass reset occurs, send email with new password

```