Sequence issue between activation and password received

Hi,

Probably my mistake but currently the new submitted user receives a activation mail by the plugin and the password e-mail from WP. Could this be changed.

First activation before password generated.

Secondly the new user accounts are available in the user list even when not activated. How do they clean up in case of fake accounts or bots??

Best

Arjan