Skip to main content


Websites sending you your password in an email when you register has the same energy as watching the sandwich counter person come out of the bathroom without washing their hands.
#Friendica still is in this boat. 😅 It's our only email address verification method at the moment.
How do you even verify an email address by sending the user the password they've set? They already know the password they set, even without access to the email address.
Oh, no, I mean that we are generating a random initial password and then sending them with their registration email. We do not let people set their password on registration.
Ah, that makes more sense! I mean, it's still not good, but it's like halfway to using a one time secret for email auth, I guess.
Thanks for the "half" part, it makes me feel a half less sad at this state of affair.

Wait - you send the fuckin' password?!

(I've never registered a friendica user....)

A randomly-generated one, yes, just ask @Becky !
⇧