New team members set their own password
Invited colleagues now choose their own password from a secure, single-use link. Passwords are never sent by e-mail.
When you invite someone to your organization, they accept the invitation and are taken straight to a page where they pick their own password. The link works once and expires after a day.
Until now, Toolbox created the account and mailed a password across. It worked, but a password that lives in a mailbox is a password you cannot take back — and it was never yours to choose. That is gone: we do not send passwords by e-mail, and nobody at CPlugin™ ever sees the one your colleague picks.
Nothing changes for the person doing the inviting. Send the invitation from Settings → Members exactly as before; if the link is ever missed or expires, resend the invitation and a fresh one goes out.