Smartstaff
2,361
edits
Changes
m
→Deprecated Password Variables
====Deprecated Password Variables====
Deprecated several password variables for security reasons. For example, sending passwords as plain text via emails is not a secure practice. If your system contains any of these deprecated variables, they will display as plain text. Deprecated variables include: <code>@password@</code>, <code>@checkportalpassword@</code>, <code>@checkactivatedpassword@</code>, <code>@randompassword@ </code> and <code>@passwordresetlink@</code>. System Administrators must change existing email templates to use password activation links that will send the user to a page where the user can set their password. The syntax for password links is https://<code>@url@@activationlink@</code>. Emails that need to be updated are located at Menu Icon > Global Settings > Security tab > Password and Activation Policies > Click the Activation Emails tab in the left navigation. Another location where these variables may be present is on user signup pages. To find user signup email templates go to Menu icon > Global Settings > Communications > System Email Templates > Search for “New User”.
<!-- 139473 - Remove ability to retrieve password on request password/new user email templates using variable syntax -->