> For the complete documentation index, see [llms.txt](https://docs.openiam.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.openiam.com/end-user-guide-for-selfservice/change-password.md).

# Password and security

Change your password, understand the rules, and know what happens when it expires.

Open **Change Password** from your account menu → **Security → Change Password**.

This is for when you *know* your current password and simply want a new one. If you cannot sign in at all, use [If you forgot your password](/end-user-guide-for-selfservice/signing-in/forgot-password.md) instead.

## Changing it

{% stepper %}
{% step %}
**Enter your current password.**

This proves it is you sitting at the keyboard, not someone who found your screen unlocked.
{% endstep %}

{% step %}
**Enter the new password twice.**

Both boxes must match exactly, or you see *"Password and confirm password must match"*.
{% endstep %}

{% step %}
**Save.**

If the new password satisfies every rule, the change takes effect immediately.
{% endstep %}
{% endstepper %}

## The password rules

Your organization defines its own rules, and the page lists them under **Password Policy Rules**. They typically cover:

* **Length** — a minimum, sometimes a maximum
* **Character types** — how many letters, upper-case, lower-case, numbers, or symbols are required
* **Reuse** — how many of your previous passwords you may not repeat
* **Personal information** — often you may not include your own name or user name
* **Age** — sometimes a minimum time before you can change it again, to stop people cycling straight back to an old favourite

If the password is rejected, the message names the rule you missed — for example *"At least 2 upper-case characters are required"* or *"3 to 6 numeric characters are required"*. Read the specific message rather than guessing; it tells you exactly what to fix.

## Expiry warnings

Passwords usually have a lifetime. As the end approaches you will see warnings when you sign in:

| Message                                                 | What it means                                              |
| ------------------------------------------------------- | ---------------------------------------------------------- |
| *"Your password will expire in '…' days."*              | A reminder. You can keep working, but change it soon.      |
| *"Your password will expire today"*                     | Change it now, before it stops working.                    |
| *"Your password has expired. Please choose a new one."* | You must set a new password before you can go any further. |

You are not locked out when a password expires — you are simply required to replace it before continuing.

{% hint style="info" %}
Change it at a moment that suits you rather than waiting for expiry to force you. Expiry always seems to arrive at the least convenient time, and the change often has to reach several of your other accounts.
{% endhint %}

## Where the new password applies

If your organization has connected its systems to OpenIAM, one password change updates your accounts across them — network sign-in, email, and business applications.

Two practical consequences:

* **It may not be instant everywhere.** A system that is briefly unavailable catches up shortly afterwards.
* **Devices holding the old password may lock you out.** A phone with your old email password saved will keep trying it and can trigger a lockout. After changing your password, update it on your phone and any other saved device.

## Seeing your password history

Your account menu → **Security → Password History** shows when your password was changed, not the passwords themselves. It is useful for answering "when did I last change this?" — see [Password history](/end-user-guide-for-selfservice/change-password/password-history.md).


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.openiam.com/end-user-guide-for-selfservice/change-password.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.