That tends to degenerate into resetting the password every time, or logging in from the password reset email you sent them.<p>In either case, you&#x27;ve moved security to the user&#x27;s email program which is (sadly) probably an improvement.