3.0 KiB
Change password
This form is used to set the password of the currently logged in user.
Authorization Roles required
This form is available to all users regardless of role.
How to access change password
Change password is accessed from the User settings Set login password menu option.
How to use this form
Enter your login credentials and choice of new password and click save to make the change.
You can click on the eye icon to conceal your entry from onlookers.
What is a secure password?
Randomly chosen
What makes a password hard to guess is how randomly it was chosen, not only its length. Password guessing tools try well known phrases first, such as song lyrics, movie quotes and lines from books and poems, along with common substitutions such as 0 for o or 1 for i. A long password made from a phrase you picked because it is memorable can be guessed far faster than its length suggests.
AyaNova accepts passwords of any length and has no rules about which characters they must contain, so you can use either of these:
- A password manager (recommended): let it generate a long random password and remember it for you.
- A passphrase of at least six random words: for example roll dice to pick words from the EFF long word list. Six words chosen this way are easy to type and remember and very hard to guess, as long as the dice choose the words, not you.
Impersonal
Make sure you have nothing personal in your password such as a relative or pet's name or relative's date of birth etc.
Properly secured from others
Do not write down your password anywhere unless it's to be immediately placed in a locked fire-proof safe.
In the current climate of hacking and malware we recommend you do not enter your password on any device for safekeeping, in particular do not email it or save it in a document either online or locally unless it's a dedicated password manager utility. Password managers have built in protection from malware interception when using their interface which does not exist in a Word document or an email.
Backed up by Two factor authentication
AyaNova has built in support for Two factor authentication and we encourage you to use it for all users.
In particular any User account that has the Business administration role (such as the built in SuperUser account) should be backed up with with two factor authentication codes as these roles are extremely powerful and can be used to easily circumvent security by assigning roles to other Users or creating entirely new Users.
Password manager
Many people prefer to use a password manager utility and AyaNova supports password managers by allowing copy and paste in the password field, clearly identifying the fields on the login form as password type HTML field in the page markup so the password manager can detect it to autotype the values and including an "eye" icon that you can use to reveal or conceal the password as you enter it.