The Password Reset Landing Page "PRLP" module enhances the original password reset landing page by letting a user set their new password at the same time they "log in" using the one-time-login link. It can also show a username and email address field. The password entry field can be configured to be mandatory. The page the user is taken to after login can be configured.
Users often forget to change their password after they use the one time login link in their password reset email. Forgetting to set their password will require them to request password reset link emails repeatedly, without fixing the underlying problem - namely that they haven't set their password to something they can remember.
Install the module
Make Password Entry Required is required and determine the page where the user arrives after signing in. We choose the front page.
After clicking on the one-time login link when you forget the password you will get this screen. You can not continue without entering a new password.