<%! from kaithem.src.util import url %> <%include file="/pageheader.html"/>

Change Own Password

Change Password
Password attempts will be rate limited for passwords under 32 chars(which are assumed to be strong enough to resist attacks without limiting). This rate limiting is standard practice on many systems, but also makes it very easy for an attacker to lock you out.
For DoS protection, consider using a five-word diceware style passwords

Passwords are currently stored on the server using SHA256 and a 16-byte salt. The password file is currently not designed to be secure against attackers with physical access to the server unless you use an extremely strong password(80-100 bits or more).

Your Current Password:
New Password:
Confirm New Password:
<%include file="/pagefooter.html"/>