How to handle password recovery in Drupal 7?

Question

PHP

When confirming the e-mail (when registering) or when recovering the password, the user is sent a one-time login link by e-mail with a suggestion to change the password. If the user logs in using this link and does not enter a password, then the next time he will not be able to log in again (as I understand it, drupal generates its own random password).
Is there any way to track that the user logged in using this one-time link? And do not let him perform other actions on the site until he enters the password? Drupal did not find anything related to user passwords in hooks.