HUMAN VERIFICATION REQUIRED ASVS 6.4.1 Initial credentials are random, short-lived, and replaced

System generated initial passwords or activation codes are securely randomly generated, follow the existing password policy, and expire after a short period of time or after they are initially used. These initial secrets must not be permitted to become the long term password.