I like the practice of emailing a link to a page where the user can set their password for the first time.