I would also have the user check their spam folder.. as sometimes things are sent there from a forum instead of their inbox... and ruben is right, it will ALWAYS look like 50 dots across the password box even if the pw is only 3 letters/numbers/characters. So the password isn't changed it is just showing that one is present.

Dunny