Resetting a password

Use this page to give a user a new password. This is the only way to change a password in the product: no screen lets a user change their own.

Before you start

• You hold the role ADMIN and can open Enterprise.
• The account is not of type Admin or Sys, unless you are a super-user yourself. The system refuses a normal administrator here, so that nobody can take over a super-user account by changing its password.
• You have a new password. The system checks no length or complexity rule when you set it. The web sign-in page needs at least 6 characters (see Sign-in, passwords and sessions), so use 6 or more.

Steps

1. Switch to Enterprise.
2. Open Configuration > Users & Roles > Users.
3. Click the user. The card opens.
4. On the General tab, type the new password in Password. The field is empty when the card opens; the old password is never shown.
5. Click Save.
6. Tell the user the new password in a safe way. The system does not ask the user to change it at first sign-in.

What changes

What	Change
Table enterprise.user	pwd holds the new Argon2id hash. pwd_changed_at is the time of the change, so Password age, days goes back to 0.
Table enterprise.audit_log	A row of kind user_mutation. The password and its hash are not written. The new pwd_changed_at shows that a change happened.
Open sessions	Not ended. A user who is signed in stays signed in. To cut a session at once, set Status to Locked first. See Locking or disabling an account.
API keys	Not changed.

What can go wrong

Message	Meaning	Fix
Only a superuser can change or delete the superuser account {id}	The account is Admin or Sys, and you are not a super-user.	Ask a super-user.
The user still cannot sign in	The status is Locked or Disabled, or RF device login is off for the handheld, or the password is shorter than 6 characters.	Check the card. The sign-in always answers Invalid username or password.
Password must have at least 8 characters. at sign-in	The sign-in page rejects a password under 6 characters. The text says 8.	Set a longer password.

Related pages

• User card, General tab
• Sign-in, passwords and sessions
• Locking or disabling an account
• API: update_user with the field pwd. An empty pwd changes nothing. RF terminal: none.