Cybersecurity enhancement with password reset on first login

System admins often create user accounts and keep spreadsheets of their credentials. To enhance the security of these accounts, we are developing a feature that allows users to change their password on first log in:

  • This feature is enabled based on permissions (change_password_first_login)
  • New users will be prompted to change their password on the first login when the permission is enabled, as well as any users who have had their password reset by a system administrator
  • Subsequent logins won’t require a password change
  • Changing the password in this step is an online action
  • If the user can’t change the password for some reason, they won’t be able to access the app
  • If the user logins for first login and closes the app before changing password, the next time they login they will be prompted to change their password

Comment with any thoughts, feedback or if you’d like support to deploy this feature to your project

5 Likes