I think they have to be used carefully though. If the web site is compulsory for people to log onto for example in a work environment, then fair enough. However if its for a community site random passwords can be annoying more than anything, causing many users frustration.  Having said that if you want to use it then heres one method you can use to generate the password.

<%
dim random_Char, counter, password

' begin random function
randomize

' Begin a for next loop
For counter = 1 to 6

   'decide if char is going to be a number or letter 0=num 1 =letter
   random_numOrChar =  Int(2 * Rnd)

   IF random_numOrChar = 0 THEN

       random_Char = Int(9 * Rnd)
   ELSE

       ' select a number between 26 and 97
       random_Char = Int(26 * Rnd + 97)

       ' take the numeric and turn it into a character
       random_Char = Chr(random_Char)
   END IF

   ' Adds the most recent random letter to the letters string
   password = password & random_Char

' Repeat loop
next

' display the random password
response.write(password)
%>

My thought behind using random generated passwords was so that each new user would have to enter a "VALID" email address in order to receive and email with their password.  If anyone has any better ideas I am more than happy to listen.

Also, how does one do multiple "not sure what word to put here"?  Example would be for someone to enter info that would be put into a database, emailed to them and emailed to me all from clicking one button.

Thanks for the tip Michael and to you UltraMods and big thanks  for the code example with explanations for each line - that is always a huge help.

To send the mail you could use one of bruce's tutotrials, as long as you have the required CDONTS/ jmail components installed on your server. To send the message to you and the user you could use either Carbon Copy or Blind Carbon Copy. Also You may want to adopt Bruce's account activation technique of sending an activtion link to the users email address. This way they must use a valid email address, but doesn't force them to use some random-easy to forget password. Everyones a winner.

http://www.webwiz.net/asp/tutorials/email_using_cdonts_tutorial.asp - http://www.webwiz.net/asp/tutorials/email_using_cdonts_tutorial.asp

http://www.webwiz.net/asp/tutorials/email_using_jmail_tutorial.asp - http://www.webwiz.net/asp/tutorials/email_using_jmail_tutorial.asp

The problem with dictionary passwords is easily solved by creating a random string (e.g. a session variable) server side and then using an MD5 algorithm on the client side to hash the password and random sting together. Of course this only applies to initially creating the password clientside and won't protect against keyloggers, but it will protect against network sniffers.

There are several MD5 algorithms available for free out there.

For sending "random" passwords, you can have a dictionary list of passwords, stick it in a dictionary object (memory expensive) and then generate a random number to choose one of them. That gives users a random password that they can remember easily.

Security is a complete farce anyways. There is no security on the internet. Servers can be mostly secured, but individual users are far too easy to hack to even bother with. The best stuff is all commercial and quite expensive.

Ultramods has the best answer up there - I'd go with his suggestions. Using random passwords offers no real security advantage against anyone who knows what they are doing.