Is it good user experience to only require an email address at signup? @JonW this is different, this is the random generated password, not the password that user set by themselves. For the password user set by themselve there is a possibility that they use that password in others website too. That is a security threat.