# Password management

This guide covers the password-related areas currently exposed in the Namirial Notify administration UI: the signed-in user's password-change form and the organization password-policy settings.

## Prerequisites

- you are signed in to Namirial Notify
- you can access the user profile area if you need to change the signed-in user's password
- you have site administrator permissions if you need to change organization password policies


## Change the signed-in user's password

The profile area includes a password-change section for updating the current user's password.

The current UI indicates that the password must not contain whitespace. The minimum length shown is the value configured in the site password policy, which defaults to 7 characters but can be changed by a site administrator from **Organization > Configuration > Security**.

To change the password:

1. Open the profile area.
2. Select **Password Change** in the left sidebar.
3. Enter the current password.
4. Enter the new password.
5. Repeat the new password.
6. Select **Save**.


![Profile Change Password section showing current password, new password, and repeat new password fields](/assets/admin-user-profile-password-change.c3c43b6d52d80fb13817a4daf2b70bdcad177363cda9ba2189487b20d686f8ba.6fd6141d.png)

## Configure site password policies

Site password policies are configured from **Organization > Configuration > Security**.

Password-policy settings can include:

- minimum password length
- password format
- regular password expression
- password expiry time
- number of previous unusable passwords
- verification against most used passwords and user data


To update password policies:

1. Open the site settings area.
2. Select **Configuration** in the left sidebar.
3. Select **Security**.
4. Review the current password-policy values.
5. Change the parameters required by your organization.
6. Select the save action.
7. Review whether users also need a forced password change so the new policy is applied consistently.


![Security or password policy section showing password rules for the site](/assets/admin-site-settings-password-policies.7d95fede95ff0bbf1d2e056e2e49e2a1f912013c944efa54d4b8b7b14968a6ca.6fd6141d.png)

## Force a password change for a user

If the site policy changes or a password must be reset operationally, a site administrator can force a user to set a new password at the next sign-in.

1. Open **Organization > Users**.
2. Locate the user in the list.
3. Open the row action menu for that user.
4. Select the password-change or force-password-change action exposed by the UI.
5. Confirm the action if the interface asks for confirmation.
6. Inform the user that the next sign-in will require a new password that complies with the current site policy.


## What to check

Before changing password settings, confirm:

- whether you are changing a single user's password or the site-wide password policy
- whether the new policy should affect existing users immediately
- whether selected users must be forced to change their password at next sign-in
- whether integrations or service accounts have password requirements that must be coordinated before expiry policies change
- whether users need communication before a stricter policy is enforced


## Expected result

The user can update their own password from the profile area, and site administrators can maintain organization-level password rules from **Configuration > Security** and force individual users to change their password when needed.

## Related

- [Admin overview](/products/namirialnotify/admin)
- [Site settings](/products/namirialnotify/admin/site-settings)
- [User profile settings](/products/namirialnotify/admin/user-profile-settings)
- [Users management](/products/namirialnotify/admin/users-management)