Source

django-registration / TODO.txt

- The "password reset" functionality currently overlaps functionality-wise 
  with Django's own, which actually implements much of the same thing, but
  without the need for an additional model.

  In fact, the whole "registration profile model" mechanism for both 
  activation and password reset could be replaced by using Django's approach
  and the token generator provided by Django.
  
  In both cases, the new password would be generated upon completion of 
  the activation/confirmation.