Change and Reset Password

This page explains how to change your own login password, how password expiry is calculated, how administrators can reset another user's password, and what to do when you forget your password.

Applicable to: users in the Kuboard built-in user repository. Users authenticated via OIDC or an external user Webhook have their passwords managed by the identity provider (IdP) and are not covered in this page.

Change Your Own Password

1. Open the profile page: click your avatar → Change Password in the top-right, or select Profile → Change Password in the left menu.
2. Fill in the new password and confirm password in the form, then click Save.

You only need to enter the new password; the old one is not required. The new password must satisfy the password policy described below.

Password Expiry Hint

The top of the change-password page shows the expiry date of your current password. When it is about to expire, a reminder also appears in your to-do list.

Password Policy

The password policy is configured by administrators under System Settings → Login Settings → Password Policy. Defaults:

Rule	Default
Length	6–24 characters
Character mix	Must include uppercase letters, lowercase letters, and digits
Reuse	Cannot match any of the last 3 passwords
Failed attempts	Account locked for 60 minutes after 5 consecutive failures
Must differ from current password	✓
Must differ from default initial password	✓

Administrators can change these rules. The change-password form validates against the current rules in real time.

Password Expiry

Each account's password has an expiry date. Defaults:

• New account / after reset: the initial password must be changed within 3 days
• After voluntary change: the new password is valid for 90 days

You cannot log in after the password expires. When it is about to expire, a reminder appears in your to-do list — follow it to change your password.

Forgot Password

Kuboard does not offer self-service password recovery. Contact an administrator:

1. The administrator resets your password to the initial password Kuboard123.
2. Log in with the initial password and immediately change it to your own password using the steps above.

Change It Right After Reset

The default initial password is publicly known. Please change it to a strong password as soon as possible after the reset.

Reset Another User's Password (Administrator)

Go to User Management → select the user → Reset Password. The password is reset to the initial password Kuboard123, and the failed-attempt counter and expiry timer are cleared. A locked account is also unlocked automatically by the reset.

To only unlock an account without resetting the password, click the Unlock button in the same row.

API Reference

See the Swagger UI "Login APIs" group for the endpoints involved in this page.