Hi,
We have recently been notified by a customer that they had reset their password but were still unable to log in.

I have looked into it and believe there could be a bug/issue with the passwords generated by Zen Cart.

We noticed that it’s hard to tell the difference between zero and lowercase/uppercase letter O. For example - 0 O o – can be easily misidentified, particularly when letters and numbers are generated in a random sequence.

When I tested the password reset feature the following password was generated by the system: qm0KEq

The zero in the example above is easily confused with an uppercase O.

It may be worth restricting the use of zeros and the letter O in Zen Cart generated passwords.

To help customers the language file /includes/languages/english/lang.password_forgotten.php should also be updated to make it clear that passwords are case sensitive.

It would be much appreciated if someone could look into these issues.
Many thanks
Richard