People Who Have Never Chosen a Password
What happens when someone whose account was created for them tries to sign in, and what to tell them.
People Who Have Never Chosen a Password
Some accounts exist before their owner has ever signed in: an artist you added by hand, an account created for someone, or someone whose details were brought over from a website you used before. These people have an account but no password.
What happens when they try to sign in
They go to your sign-in page and type their email and any password at all. They are not told "Invalid email or password". What happens is:
- They are emailed a link, good for 14 days
- The page shows a welcome-back message naming the address the link was sent to
- They open the link, choose a password, and are signed straight in
- They land on their dashboard
Forgot password on the sign-in page does the same job, so either route works.
What to tell them
"Go to our sign-in page, enter your email, and check your inbox for a link to choose your password." That is all. You do not need to set a password for them, and you cannot see or choose anyone's password.
If the link has run out
After 14 days the link stops working. They can try to sign in again, or use Forgot password, to get a fresh one. You can also send one yourself from Settings → Users: see Sending Password Resets.
Artists invited to a show
When you invite an artist who has never had a password, their invitation reads "accept, choose a password", also valid for 14 days. Accepting and choosing the password happen in one step, and they do not end up with a second account.