Users can change their passwords whenever they want by using Self Service Password Reset. Self Service Password Reset allows administrators to customize the password change experience for the users from the beginning to the end. The Change Password module allows you to configure actions the users must perform before changing their password. It also allows you to configure tasks the users must perform after they changed their passwords.
Here is a list of some of the options you can configure for the users:
Define permissions the users must have to change their password.
Logout users after they change their passwords.
Require users to specify their existing passwords to change their passwords.
Show a password strength meter that is configurable among many other options.
The Self-Service Password Reset evaluates password strength or entropy based on factors like length and character composition. It classifies passwords into the different strength level such as Very Weak, Weak, Good, Strong, and Very Strong.
To display the password strength meter on the SSPR UI:
Enable Show Strength Meter.
Navigate to Strength Meter Algorithm and select the required algorithm type.
SSPR offers three Strength Meter Algorithms:
Traditional – built in algorithm
zxcvbn – open source library
Nist – Entropy calculator
NOTE:By default the Strength Meter Algorithm is set to Traditional built-in algorithm.
Below are some examples of good and bad passwords.
|
Strength Level |
Example |
Explanation |
|---|---|---|
|
Very Strong |
C0mpl3xP@$$w0rd! |
This password is very strong due to its length, complexity, and the use of a mix of characters, making it highly secure. |
|
Strong |
MySecur3P@ssw0rd |
This password is strong due to its length, complexity, and the inclusion of various character types. |
|
Good |
SecurePwd123! |
This password is good as it includes a mix of uppercase and lowercase letters, numbers, and a special character. |
|
Weak |
qwerty |
This password is weak as it is a common keyboard pattern and lacks complexity. |
|
Very Weak |
password123 |
This password is very weak as it is a common and easily guessable sequence of characters. |
Allow use of phrases as the password (for example, electric wire) using the Display Phrases in Randoms option.
When the users click Change Password, the web page lists the prerequisites for users to change their password. If you want to change the text of the listed items, Self Service Password Reset allows you to do that. For more information, see the Password Rule Text setting in Configuring a Profile for a Password Policy.
To configure the Change Password settings:
Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.
In the toolbar, click your name.
Click Configuration Editor.
Click Modules > Authenticated > Change Password.
Use the detailed help to configure the different available settings.
In the toolbar, click Save changes.