Real-World Example
Maya is already signed in and wants to rotate her password. She enters her current password, chooses a new password, confirms it, and the portal updates her account.
Visual Flow
How It Should Work
- It should require the current EcoMail Hub password.
- It should require the new password to be different and confirmed.
- It should apply the same password strength rules used elsewhere in the app.
How It Should Not Work
- It should not let one EcoMail Hub user change another user’s password from this page.
- It should not accept the current password as the new password.
- It should not use the creditor or Super Admin guard for current-password validation.
Last modified on July 30, 2026
