Password Management

This page explains the password rules, the first sign-in, password changes, and password resets by an administrator.

When to use it

Use this page if you set, change, or reset a password.

Password requirements

Every password in FT Configs UI must follow these rules:

  • Length: 8 to 64 characters.

  • At least one lowercase letter (a-z).

  • At least one uppercase letter (A-Z).

  • At least one digit (0-9).

  • At least one special character: @, $, !, %, *, ?, &.

  • Only Latin letters, digits, and these special characters.

These rules apply to the first sign-in and to a password change.

The system rejects a password if it breaks one rule.

Set the password at first sign-in

When an administrator creates a user account, the user gets a temporary password. At the first sign-in with this password, the Set your password dialog opens. You cannot skip this step. The backend sets the passwordChangeRequired flag on the account to require it.

  1. Enter your username and the temporary password from your administrator.

  2. Click Login. The Set your password dialog opens.

  3. Check the fields in the dialog:

    • Username: shown for reference, read-only.

    • Temporary password: enter the temporary password from the sign-in.

    • New password: enter your new password. A strength meter appears next to this field.

    • Confirm password: enter the new password again.

  4. Optional: click Generate strong password to let the system create a secure random password.

  5. Click Save password.

Expected result: the system saves your new password.

The Generate strong password button uses a secure random generator (crypto.getRandomValues). The password meets all requirements. The UI shows the generated password for 15 seconds. Save it before you click Save password.

Requirements checklist

When you type the new password, a checklist shows the met requirements:

  • 8–64 characters

  • One uppercase letter

  • One lowercase letter

  • One number

  • One special character (@ $ ! % * ? &)

Each item changes at once while you type.

Caps Lock indicator

If Caps Lock is on while you type in a password field, the UI shows a warning. The warning helps you avoid typing errors.

Read the strength meter

The new password field shows a strength meter. The meter checks more than the basic requirements. It appears at the first sign-in and on the Change password page.

Level Meaning

Weak (33%)

The password meets the minimum rules but has weak points.

Medium (66%)

The password is fairly strong but you can improve it.

Strong (100%)

The password has good length and variety and has no weak patterns.

The meter checks these points:

  • Common weak words: for example password, qwerty, or admin.

  • Repeated characters: 4 or more identical characters in a row, for example aaaa.

  • Keyboard sequences: for example qwerty, asdf, or abc.

  • Character variety: how many character types you use and how you mix them.

A password can meet all basic requirements and still show Weak. This happens if it has common patterns or low variety.

Change your password

You can change your password at any time.

  1. Open Settings in the user menu.

  2. Click Change password. The Change password page opens. You can also open the /change-password URL.

  3. Enter your Current password.

  4. Enter your New password. The new password must meet all requirements on this page.

  5. Enter the new password again in Confirm new password.

  6. Click Change password.

Expected result: the UI shows the message Password updated.

The system checks these points:

  • The new password meets all character requirements.

  • The new password is different from the current password.

  • You have not used the new password before, if the server keeps a password history.

Reset a password as administrator

An ADMIN can reset the password of any user.

  1. Open Settings and then the Users tab.

  2. Open the user.

  3. Click Reset password.

  4. Confirm the reset in the dialog. The system creates a new temporary password.

  5. Copy the temporary password from the dialog.

  6. Send the temporary password to the user through a secure channel.

The account gets the flag passwordChangeRequired = true. At the next sign-in with the temporary password, the Set your password dialog opens. The steps are the same as in Set the password at first sign-in.

The dialog shows the temporary password only once. Copy it before you close the dialog.

If the server can send email, the system sends the temporary password to the user. In this case, the dialog does not show the password. See User Management.

Troubleshooting

BOOTSTRAP_INVALID_CREDENTIALS (HTTP 401)

The temporary password is wrong. Check the password from your administrator.

PASSWORD_REUSE_NOT_ALLOWED (HTTP 400)

The new password is the same as an earlier password. Choose a different password.

BOOTSTRAP_ALREADY_COMPLETED (HTTP 409)

The first sign-in setup is already done for this account. Use the regular sign-in.

If the problem stays, contact your system administrator.

Related pages