After create/admit, copy the temporary password from the credentials dialog (shown once).
Sign in and change the password when prompted.
Upload a profile photo when required (staff always; learners recommended for report cards).
If a password is lost later: the user submits School ID + User ID on Forgot password. A school admin resets the password from Accounts and shares new temporary credentials. Email self-service reset links are not used.