.. _change_user_password:

***************************************
`Change pgAdmin Password Dialog`:index:
***************************************

It is a good policy to routinely change your password to protect data, even in
what you may consider a 'safe' environment. In the workplace, failure to apply
an appropriate password policy could leave you in breach of Data Protection
laws.

Please consider the following guidelines when selecting a password:

* Ensure that your password is an adequate length; 6 characters should be the
  absolute minimum number of characters in the password.
* The minimum password length is set by default to six characters. This value 
  can be changed by setting the *PASSWORD_LENGTH_MIN* option to desired length 
  in pgAdmin configuration; see :ref:`config_py` for more information.
* Ensure that your password is not open to dictionary attacks. Use a mixture of
  upper and lower case letters and numerics, and avoid words or names. Consider
  using the first letter from each word in a phrase that you will remember
  easily but is an unfamiliar acronym.
* Ensure that your password is changed regularly; at minimum, change it every
  ninety days.

The guidelines above should be considered a starting point: They are not a
comprehensive list and they **will not guarantee security**.

.. image:: images/change_user_password.png
    :alt: Change current user password dialog
    :align: center

Use the *Change pgAdmin Password* dialog to change the password you use to log
in to pgAdmin itself, rather than the password of a database server connection:

* Enter your existing password in the *Current Password* field.
* Enter the desired password for in the *New Password* field.
* Re-enter the new password in the *Confirm Password* field.

Click the *Change* button to change your password; click *Close* to exit the
dialog.

Changing your password signs out all of your other active sessions, so anyone
using your account elsewhere must sign in again with the new password. The
session you change it in stays signed in. When an administrator resets your
password from the :ref:`User Management <user_management>` page, all of your
sessions are signed out.
