I have a very common use case where an admin is creating an account of the user and then I need to send the login id generated by my system to the user. And the user will need to set a password on the first login.

So my question here is should I send the user id on email and if yes, then what are the security risks that must need to be incorporated?

  • are you the admin creating the account?what is the procedure for setting up the first password? – Vipul Nair Jun 1 '19 at 18:01
  • The procedure I thought is that when admin creates an account then he will add user's phone no also. So when user will try to log in first time using his login id then he will receive an OTP on his phone and after entering the OTP he can set his password. – Dhruv Pahuja Jun 2 '19 at 6:35
  • Please write the complete procedure and explain to me why an admin is creating other users account and where does he get users mobile numbers? – Vipul Nair Jun 2 '19 at 7:08

Login ID should be considered public. So feel free to send it per email.

|improve this answer|||||

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.