I remember a discussion not to long ago about 128 character password resets going out in HTML format and causing trouble when a user’s email HTML-renders special characters. I wanted to link to or reply in that thread but couldn’t find it…
The length got shortened a while ago, but they still went out in unhandled HTML format instead of plain text or popped into a <code>password goes here</code> block, so that was still randomly broken. Or not broken? I got WONTFIX’d with the approved workaround “right-click, view source, copy temporary password”.
Looks like it’s fixed now!
Use this temporary password to log into Kinetic. Please select or double-click the password between the [ ] brackets. The [ ] brackets ARE NOT part of your password. (password redacted)
Passwords appear to be restricted to [0-9], [A-Z], [a-z].
Sigh.