IT support and helpdesk
A temporary password should never stay readable for more than a few minutes.
Real-life example
Resetting an account
- You generate a temporary password with the built-in generator.
- You add a PIN and choose a one-hour expiry.
- You send the link by email and read the code out over the phone.
What you gain
- Two channels: the link on one side, the code on the other.
- 5 code attempts at most, then destruction.
- No account for the user to create.