Generate new password for users periodically and notify user of new password

Question

I am running a private Drupal 7 site where all user accounts are created by admins and managers. I need to ensure that all users have access to the email account that their accounts were created with.

What is the best way to do the following:

• Create a user account with an automatically generated password, and notify the new user of their password via email.

• After a 4 week period, a new password must be generated for the user and set as their active password automatically. The user needs to be notified of their newly updated password via email, and the newly generated password must be used to access the site until it is reset again.

Are there any Drupal 7 modules that can help achieve this?

Any suggestions on building a custom module that can help resolve this?

Answer 1

This issue was talked about during the great Drupalgeddon. Because no such bulk reset tool existed for a site.

Here is a recently created tool to perform this task. Other such tools have existed since Drupalgeddon.

Mass Password Reset Module

This module allows users with "Administer users" permission to reset all user accounts and notify all users

Details

The module will reset the passwords of all users except the administrative superuser id 1. You can optionally reset the administrative superuser id 1. Once passwords have been reset, users will optionally receive emails using the Drupal password recovery email. The password recovery email content can be edited at the account settings configuration page.

Use Cases

You have a large number of user accounts pre-created and want to send password recovery emails to all users during a site launch. You need to quickly change all passwords on a site for security reasons.

Answer 2

You can use the Force Password Change module too. Read the description:

This module allows administrators to force users, by role, individual user, or newly created user, to change their password on their next page load or login, and/or expire their passwords after a period of time.