Password Change Action Advanced Customisations

The Password Change action used in the Kuika platform allows users to securely change their current passwords. Beyond the basic functionality, various customisations and security measures can be applied to the password change process:

1. Form Validation (Field Consistency): The ‘New Password’ and ‘New Password (Repeat)’ fields in the password update form can be linked to each other using the Condition property. This allows you to check whether the two fields match before the Password Change action is triggered. If the validation fails, the process is stopped; if successful, the password change process is initiated.

2. Password Security Level Control: Various rules can be applied to ensure that the new password is strong. For example:

• Minimum character length (e.g. at least 8 characters)
• Must contain at least one uppercase letter, one lowercase letter, one number, and one special character

These checks can be performed using Condition expressions defined on user inputs. Processes can be blocked for passwords with weak security levels, and appropriate warnings can be displayed to the user.

3. Conditional Warning Display: When the password is successfully changed, the user can be notified using the Notify action. This notification can be configured, for example, as ‘Your password has been successfully updated.’ Similarly, it is possible to display an error message when the operation fails.

Technical Risks and Controls

• Invalid Old Password: If the user enters their current password incorrectly, the system rejects the password change. An error message should be added if necessary.
• Weak New Password: Values that do not comply with password policies should be prevented (minimum length, complexity rules, etc.).
• Repeated Password Use: The new password must not be the same as the old password. This should be prevented with control logic.

Password Change Action is a security step that enables users to change their system passwords to increase security. It can be easily implemented via the UI and customized with optional parameters. When used in conjunction with a strong password policy, it significantly increases application security.