Initial/temporary passwords or secrets must be securely transferred to the user (email to a known good address without the username or address of record, or phone call). A phone call is the preferred method.See also: Level 2, Level 3, Level 4, SA8, Servers A