A user changes their own password from the profile menu. A user who forgot it asks for an e-mailed link on the sign-in page, and an administrator can set a new one on the User screen. Only the steps are described here.
Reset password on the sign-in page: an e-mailed link
The user forgot the password and has an e-mail on the user record
An administrator
User > the row's actions menu > Reset password
The user cannot use the e-mail route, or you set the password for them
Change your own password
1
Open the form
Who
Any user
Where
The profile menu (your name) > Change password
What changes
A form with your name, Old password, New password and Confirm password.
2
Fill it in
What changes
When you leave Old password the system checks it and says "Please enter valid old password" if it is wrong. If the confirmation differs it says "Two passwords that you entered are inconsistent".
3
Save
What changes
Your password changes and you are signed out. Sign in again with the new one. If the new one is refused, the old password you typed was wrong and nothing changed: sign in with the old password and change it again.
Forgot the password
1
Ask for a link
Who
The user
Where
The sign-in page > Reset password (the page is titled Forgot password?)
What changes
Enter the e-mail address of your user record and choose Send reset instructions. The page always says "An email has been sent to your address. Please check the email address.", whether or not the address matched a user.
2
Open the link
Where
The e-mail
What changes
The link opens a Reset Password page. It works for 20 minutes. A newer request cancels the older link.
3
Choose the new password
Where
New Password, Confirm Password > Change Password
What changes
The password changes and you go back to the sign-in page. A link that has run out says "Token is either invalid or expired.": ask for a new one. A failure says "Failed to update your password."
Reset by an administrator
On User, open the row's actions menu and choose Reset password. A small form asks for one Password; press Reset. The message is "Password reset successfully". The new password also unlocks the user. Tell the person the new password by a private channel.
Common questions
I changed my password and was signed out. Which one do I use now?
The new one. If it is refused, the old password you typed was wrong and nothing changed: use the old one and change it again.
The reset e-mail did not arrive.
Check with the administrator that your user has the right e-mail. Ask once more and use only the newest e-mail, within 20 minutes. Or the administrator sets a new password with Reset password on User.
An administrator reset my password. Do I have to change it?
The sign-in page does not ask you to. Choose your own from the profile menu with Change password.
"Please enter valid old password" appears when I leave the old password box.
The password you typed is not the current one. Type the current password. If you do not remember it, sign out and use Reset password on the sign-in page.
The reset page says "Failed to update your password."
Ask for a new link and try again. If it repeats, the administrator sets a new password for you on User.
