Account security
Change the current account password, replace recovery codes and understand the effective company sign-in policy without administering other users.
Screen orientation
Available to the authenticated user for their own identity. Password, TOTP, recovery and session-version checks remain server-authoritative.
Separate cards cover password change, recovery-code replacement and the read-only company sign-in policy. Sensitive values are accepted only in their intended form.
Field reference
The entries below describe the current screen controls and read-only values. They do not relax server-side validation, site scope, classification handling or required independence in a governed decision.
| Field or value | Control | Required or shown when | How to use or read it | Result |
|---|---|---|---|---|
| Current password | Password | Required for sensitive self-service changes. | Enter the current account password; it is never displayed back. | Re-authenticates the current user. |
| New password | Password | Required for password change. | Use a new value satisfying the current password policy. | Becomes active after the successful change. |
| Confirm new password | Password | Required and must match New password. | Re-enter the exact new value. | Prevents an accidental mistyped change. |
| 6-digit authenticator code | TOTP | Required when the effective policy/action demands MFA proof. | Enter the current code from the enrolled authenticator. | Confirms possession for the sensitive action. |
| Recovery-code status | Read-only state | Derived. | Use it to decide whether replacement is necessary; existing codes are never revealed. | Shows whether recovery evidence is available. |
| Company sign-in policy | Read-only policy | Derived from company settings. | Read whether MFA is required for all, administrators only or disabled for company users. | Explains the current sign-in branch without changing it. |
Actions and effects
When to use: After current password, matching new password and required TOTP are supplied.
What it does: Changes the password and revokes active sessions according to the security contract.
When to use: After current password and required TOTP are verified.
What it does: Invalidates prior recovery codes and displays the new set once.
Lists and states
- Security status cards show effective MFA policy and recovery state; they do not expose password, TOTP seed or retained recovery-code values.
Authority boundary
This is self-service for the current identity. It cannot change company MFA policy, another user, roles, sites or clearance.