Add an option to ask users to change their passwords on the Edit User Account page #8581

New Issue

GiteaMirror · 2025-11-02T08:11:39-06:00

GiteaMirror commented

2025-11-02 08:11:39 -06:00

Originally created by @rcdevice on GitHub (Feb 19, 2022).

Feature Description

Our team does not allow users to register themselves ，the administrator assigns the initial user account and password instead.
However, when some users log in for the first time, they change their passwords to the original ones, which reduces login security because the initial passwords of all users are the same .

I wish the Gitea team to provide an OPTION on the Edit User Account page to prompt the user to change his password when the next time he login. Once he does, this option will be automatically unchecked the next time the administrator enters the current user's account management page. the administrator can determine whether the user has changed the password based on this OPTION check status. the new password cannot be the same as the previous one.

Screenshots

Originally created by @rcdevice on GitHub (Feb 19, 2022). ### Feature Description Our team does not allow users to register themselves ，the administrator assigns the initial user account and password instead. However, when some users log in for the first time, they change their passwords to the original ones, which reduces login security because the initial passwords of all users are the same . I wish the Gitea team to provide an OPTION on the Edit User Account page to prompt the user to change his password when the next time he login. Once he does, this option will be automatically unchecked the next time the administrator enters the current user's account management page. the administrator can determine whether the user has changed the password based on this OPTION check status. the new password cannot be the same as the previous one. ### Screenshots ![Snap8](https://user-images.githubusercontent.com/30013680/154785186-c2b9cf22-f265-4a95-bc20-a1ebd54ae95f.jpg)

GiteaMirror added the type/proposal label 2025-11-02 08:11:39 -06:00

GiteaMirror commented

2025-11-02 08:11:39 -06:00

@lunny commented on GitHub (Feb 20, 2022):

I think you mean require user to change password in next login? And when next time user login and changed their password, this option will be updated as unchecked.

@lunny commented on GitHub (Feb 20, 2022): I think you mean require user to change password in next login? And when next time user login and changed their password, this option will be updated as unchecked.

GiteaMirror commented

2025-11-02 08:11:40 -06:00

@rcdevice commented on GitHub (Feb 21, 2022):

I think you mean require user to change password in next login? And when next time user login and changed their password, this option will be updated as unchecked.

exactly yes

@rcdevice commented on GitHub (Feb 21, 2022): > I think you mean require user to change password in next login? And when next time user login and changed their password, this option will be updated as unchecked. exactly yes

GiteaMirror commented

2025-11-02 08:11:40 -06:00

@MorganTheGull commented on GitHub (Nov 28, 2023):

This seems to of existed in a previous Gitea version (before 1.21.1) based on the FAQ. It makes it seem like the Admin could previously force the user to change it on next login already like this and not just from CLI commands.

@MorganTheGull commented on GitHub (Nov 28, 2023): This seems to of existed in a previous Gitea version (before 1.21.1) based on the [FAQ](https://docs.gitea.com/1.20/help/faq?_highlight=passwo#how-can-i-enable-password-reset). It makes it seem like the Admin could previously force the user to change it on next login already like this and not just from CLI commands. ![image](https://github.com/go-gitea/gitea/assets/11876690/915672da-a5b1-4cbc-9e16-638a46730710)

GiteaMirror commented

2025-11-02 08:11:40 -06:00

@jolheiser commented on GitHub (Nov 28, 2023):

@MorganAbrams I'm surprised this hasn't been reported before, those docs have been misleading since I wrote them back in 1.10 🙈
https://github.com/go-gitea/gitea/pull/8883

4d876ab1c8/routers/admin/users.go (L210-L226)

4d876ab1c8/templates/admin/user/edit.tmpl (L68-L105)

I will update them for now, though I think this is still a valid enhancement request!

@jolheiser commented on GitHub (Nov 28, 2023): @MorganAbrams I'm surprised this hasn't been reported before, those docs have been misleading since I wrote them back in `1.10` :see_no_evil: https://github.com/go-gitea/gitea/pull/8883 https://github.com/go-gitea/gitea/blob/4d876ab1c8f2bca3bdbfa9091821267ade938bf3/routers/admin/users.go#L210-L226 https://github.com/go-gitea/gitea/blob/4d876ab1c8f2bca3bdbfa9091821267ade938bf3/templates/admin/user/edit.tmpl#L68-L105 I will update them for now, though I think this is still a valid enhancement request!

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/gitea#8581