I am thinking about a way to change this thing. The ten minute time until the random password is set is probably confusing for many users.
We could simply set a default password yacy as I explain as answer to Forgot your password but then all peers where people forget to change the password are open to everyone. But however this is the default behaviour for most software which have accounts - they come with a default password.