@sxpoet Certainly people need to confirm their email but this has *nothing* to do with the password as it’s a password that you set on signup, so either an email with a randomly generated password (not by the user) which is then changed or just a confirmation link for your email would be suitable. Neither of these are the case here and this is completely unrelated to the situation here.
Update, Johnny has said that a second email if your password is changed will not be emailed out so it is worthwhile changing your password but please not to the same as any other account as there is a still a security risk as it seems to be stored as plain text. I’m going to test this now.
