The ‘My account’ link is shown in the navigation bar at the top of the page. This link directs the user to a page where they can edit their own email address or password. Administrators can manage these details for any user by editing accounts or resetting passwords. The name on a user account can only be updated by an administrator.
To change a password it is necessary for the user to enter their existing password. New passwords must be at least 8 characters long and sufficiently complex to be labelled at least Acceptable strength by the password strength indicator. Some complex passwords are suggested above the new password box.
Passwords expire after 6 months, after which time a user is forced to change their password. Users with expired passwords have no access to the system except for the change password screen.