I created a small website where participants can sign up with some data (name, email, birthdate, ...) but they don't have to set username and password.
After a while it would be useful to provide some kind of overview site (of course not showing any personal data) for each user. Now I'm thinking about different ways how to achieve that:
Sending each User a personal URL (e.g. mydomain.com/LongAndUniqueRandomString) without login.
- PRO: less overhead, less security issues
- CON: public to everyone else who has the URL, bad email practice as it behaves like phishing spam
Implementing a login and send each User his personal (predefined) Password
- PRO: better privacy
- CON: no save way to provide password to the user
What do you think?