I tried SO password recovery,
you enter your email and a captcha after you get an e-mail:
here's your password : aaa3437 just kidding, go to this link ....
is it considered a bad idea to generate a random password and send it to the e-mail ?
1: send an email with a password reset link 2: click on the link, pass reset occurs, send email with new password