Password Change Enforcement

[Aniwene_Madolomani]

Hello, thank you for introducing the User Password Change feature. its amazing.

@lubos

I agree and this is going to be implemented pretty soon. It’s OK for administrator to set initial password but it is absolutely a must for users to change their own passwords too.

@lubos

Implemented in the latest version (14.7.48).

The username in top-right corner is now clickable which allows logged-in user to change their password.

I would like to suggest we introduce four new important features that are connected to User accounts passwords

• Admin SMTP
• Password Policy, Password Strength
• Automatic Pass Generator
• Change Pass When Login

Here is how this would work. According to the steps followed below, for first time user creation and password reset.

1. Administrator Goes to “Settings” (This would be introduced with these features)
2. Admnistrator creates (Application Admin SMTP details - For all emails related to manager)
3. Administrator sets up Password Policy
4. Administrator creates a User Account
5. Administrator generates password for the User Account using Automatic Pass Generator
6. Administrator clicks - Send Login details to email, and inputs the user email address. (Or users username if they set the username as the User’s email address)
7. The Login details are also shown on Screen, so Admin can copy to clipboard and share with user manually, just incase the email doesnt go through or there is problem with SMTP.
8. Administrator sets that after login, the user should change their password.
9. User login with the details they received in email
10. During login they are prompted to Change Pass When Login
11. During password change, as they input their password, there is a strength meter showing their Password’s Strength
12. After successful change, if later the user loses their password, they can just say forgot password in the login page, input their email, and the SMTP will allow the system to send a password reset email.

I have created a common business workflow that i think we can implement and why the features would be important.