How can I verify email addresses?
That sounds like the core behaviour to: "Require email verification when a visitor creates an account"



However, the password will be selected after clicking the email verification link, to activate the account.