thanks both for the replies.
Breezer for some reason the message appears sometimes and sometimes not? (different users and I reset the login count in the db) anyway, isn’t the $_SESSION checks the current session? I mean if the user logs in after 2 months again he is going to see the same message even though its not his first login no?
maybe it’s just the hour here. time for bed.
Also before seeing your reply I tried doing something along ganeshXL recommendation. I’m in no way even closer to know what I’m doing but I scrapped this plugin (which doesn’t work btw..)
is this anyway close to a workable plugin or am I way too far?

any input appreciated...
<?php
/*
* prompt to change password on first login
* Display a message if this is the
* first time a web user is logged in
*
* Configuration:
* &MessageChunk=Chunk to display;
* Event:
* check the OnWebLogin event
*/
global $content;
// Get a reference to the event
$e = &$modx->Event;
switch($e->name) {
case 'OnWebLogin':
// check the db to see if this is the first time a web user logs in
$table = $modx->getFullTableName('web_user_attributes');
$result = $modx->db->select("logincount", $table, "1");
if ($result =="1") {
echo $modx->getChunk('$MessageChunk');
}
break;
default :
return; // stop here - this is very important.
break;
}
admin note: code tags added