185
The best practice in this instance is to send them a link to a page where they can set their own password. You should ensure that after they have used this link to register, that the link cannot be used for account takeover. One way of achieving this is including a time limited, single use toke...