Password
The Password page is where you change the password you use to sign in to SecurityTrax. You need to know your current password to change it — SecurityTrax doesn't let you reset your password by just knowing your username.
The page heading is "Update password" with the subheading "Choose a new password that meets the requirements below." A Password requirements list sits between Current Password and New Password. Administrators see the same list on a user's Password Change card when they set a password by hand.
Getting here
- From Profile or any other Settings page, click Password in the Settings sub-nav.
- Or navigate directly to
https://portal.securitytrax.com/acme/settings/password.
This route is specifically excluded from the "password-is-not-expired" middleware — if your password has expired, SecurityTrax still lets you onto this page so you can update it. Every other page would redirect you back here until you do.
Forced password change banner
If your administrator has flagged your account as requiring a password change on next login, a red callout appears above the form:
- Heading: "Password Change Required".
- Body: "You are required to change your password at this time. Once you have changed your password, you will be able to continue."
This is common on new accounts (first login requires setting your own password) or after an admin has reset your password. Once you submit a new password here, the flag clears and you can use the rest of the app normally.
Form fields
| Field | Required? | Type | Validation | Notes |
|---|---|---|---|---|
| Current Password | Yes | Password | Must match your current password | Guards against a bystander changing your password if they find your screen unlocked. Wrong value returns: "The provided password does not match your current password." |
| New Password | Yes | Password | Must meet the requirements listed on the page | Hidden by default; use the show/hide icon to reveal. |
| Confirm Password | Yes | Password | Must exactly match New Password | Wrong confirmation returns: "The password confirmation does not match." |
Complexity rules
The Password requirements list on the page is:
- Between 7 and 40 characters
- At least 1 uppercase letter
- At least 1 lowercase letter
- At least 1 number
- Cannot be your username, current password, or a recently used password
Special characters aren't required but are allowed. The password cannot begin or end with spaces, and a handful of very common passwords are rejected.
If save fails the rules, an error appears under New Password naming each failed rule — for example "Must be at least 7 characters. Must include at least 1 number." The generic "The provided password does not meet the password requirements." message is only a fallback.
Tip. A phrase of three short unrelated words with a capital letter and a digit (
SunsetRabbit7boxes) is easier to remember and stronger than a single word with a character substitution (P@ssw0rd).
Saving
Click Save at the bottom.
On success:
- All three password fields clear immediately.
- SecurityTrax records your password change — the forced-change flag clears, and your last-password-change timestamp updates.
- You're sent back to the page you were trying to open (or Home if you opened this page yourself).
- A success toast appears: "Your changes have been saved."
On failure, inline errors appear under the specific field(s) that failed.
What to do if you've forgotten your current password
You can't change your password from this page without knowing the current one. There is no self-service reset link on the login page. Contact your administrator (or SecurityTrax support if you are the administrator) and ask them to issue a new password and mark your account for a forced change on next login. See Logging In.
Effect on other sessions
Changing your password doesn't immediately log out other sessions you've left signed in — those sessions stay active with their existing cookie. To see where else you're signed in (and optionally end those sessions), use Login Activity.
Related
- Profile — keep your contact information current.
- Login Activity — review recent sign-ins and end sessions on other devices.
- Logging In — what happens after your password changes.