Can admins create new accounts without passwords? When an admin creates a new account (admin/people/create), they're prompted to enter a password for the account. My client wants it to be that when an account is created in the back end, the admin doesn't have to enter a password, but the user is sent a notification message with a one-time log-in link and can then set a password after logging in using that. What's the best way to achieve something like this?

I've thought of maybe altering the form to set the #default_value of the password fields to a random password and then setting '#access' =&gt; FALSE, but I'm not sure if that's the best way to go about it.
There is a module that does this.

Check out Generate Password.

It introduces this additional setting in Configuration » People » Account settings:


  Users may enter a password on registration. If left empty, a random password will be generated. This always applies when an administrator is creating the account. 


Then, when creating the account, leave the password field empty, but make sure you also check this checkbox on the "Add user" page:


  Notify user of new account 


The result of these two settings is that the module generates a random password when the administrator creates an account, and the user is sent an email with a notification about the account and prompted to set a password in the one-time login link that is included in the notification.

If you want to learn how it is done, read the source code.