Password Management

This section describes how passwords work in FT Configs UI, including requirements, first login setup, password changes, and administrator-initiated resets.

Password requirements

Every password in FT Configs UI must satisfy the following rules:

  • Minimum length: 6 characters

  • Maximum length: 16 characters

  • Must include all of the following:

    • At least one lowercase letter (a-z)

    • At least one uppercase letter (A-Z)

    • At least one digit (0-9)

    • At least one special character: @, $, !, %, *, ?, &

These rules apply to all password entry points: registration, first login, and password change.

Passwords that do not meet all four character-type requirements will be rejected by the system.

First login setup

When an administrator creates a new user account, the user receives a temporary password. On the first login with this temporary password, the system automatically opens a Set Password dialog.

This flow cannot be skipped. The backend enforces it by setting a passwordChangeRequired flag on the account.

Steps

  1. Enter your username and the temporary password provided by your administrator.

  2. Click Login.

  3. The Set Password dialog opens automatically.

  4. You will see the following fields:

    • Username — displayed as read-only for reference.

    • Temporary password — enter the temporary password you just used to log in.

    • New password — enter your new password (a strength meter is shown beside this field).

    • Confirm password — re-enter the new password to confirm.

  5. Optionally, click Generate Strong Password to have the system create a secure random password for you.

  6. Click Submit to save your new password.

The Generate Strong Password button uses a cryptographically secure random generator (crypto.getRandomValues) to produce a password that meets all requirements.

Real-time requirements checklist

As you type your new password, a checklist is displayed showing which requirements are satisfied:

  • Minimum 6 characters

  • Contains uppercase letter

  • Contains lowercase letter

  • Contains digit

  • Contains special character (@$!%*?&)

Each item updates in real time with a visual indicator.

Caps lock indicator

If Caps Lock is enabled while you are typing in any password field, a warning indicator is shown. This helps prevent accidental password entry errors.

Password strength indicator

During first login, the new password field displays a strength meter that evaluates your password beyond the basic requirements.

Strength levels

Level Indicator

Weak (33%)

Password meets minimum rules but has detectable weaknesses.

Medium (66%)

Password is reasonably strong but could be improved.

Strong (100%)

Password has good length, diversity, and no detectable weak patterns.

What the strength meter checks

The meter evaluates additional factors beyond the basic requirements:

  • Common weak words — detects passwords containing words like password, qwerty, or admin.

  • Repeating characters — flags sequences of 4 or more identical characters (e.g., aaaa).

  • Keyboard sequences — detects patterns like qwerty, asdf, or abc.

  • Character set diversity — evaluates how many distinct character categories are used and their distribution.

A password can meet all basic requirements and still be rated as Weak if it contains common patterns or low diversity.

Changing your password

You can change your password at any time from the Change Password page, accessible from your profile or directly via the /change-password URL.

Steps

  1. Navigate to the Change Password page (from your profile or the application menu).

  2. Enter the following:

    • Current password — your existing password.

    • New password — your desired new password (must meet all requirements listed above).

    • Confirm password — re-enter the new password.

  3. Click Submit.

The system validates that:

  • The new password meets all character requirements.

  • The new password is different from the current password.

  • The new password has not been used previously (if password history is enforced by the server).

Password reset by administrator

Administrators can reset any user’s password from the user management interface.

How it works

  1. The administrator opens the user’s details in the Users management section.

  2. The administrator clicks Reset Password.

  3. The system generates a new temporary password and displays it in a modal dialog.

  4. The administrator copies the temporary password and provides it to the user through a secure channel.

  5. The user’s account is flagged with passwordChangeRequired = true.

  6. On the user’s next login with the temporary password, the Set Password dialog opens automatically (the same flow described in First login setup).

The temporary password is shown only once in the modal. Make sure to copy it before closing the dialog.

Common errors

The following errors may occur during password-related operations:

Error Code Meaning

BOOTSTRAP_INVALID_CREDENTIALS

401

The temporary password entered during first login is incorrect. Verify the password provided by your administrator.

PASSWORD_REUSE_NOT_ALLOWED

400

The new password matches a previously used password. Choose a different password.

BOOTSTRAP_ALREADY_COMPLETED

409

The first login setup has already been completed for this account. Use the regular login flow instead.

If you encounter any of these errors, follow the guidance in the Meaning column. For persistent issues, contact your system administrator.