Overview#

Change-password is a Well-Known URI that sites can use to make their Password Change forms discoverable by tools.

Change-password simple affordance provides a way for software to help the user find the way to initiate a Password Change].

Change-password is defined in an Internet Draft titled A Well-Known URL for Changing Passwords[1]

Servers should redirect HTTP requests for an origin’s change password url to the actual page on which users may change their password by returning a response with a Redirection status of 302, 303, or 307, and a Location header. FETCH HTTP-SEMANTICS Clients must handle such redirects when requesting a change password url.

Example#

"https://example.com/.well-known/change-password"

Implementations#

Apple developed the specification and has an implementation
https://apple.com/.well-known/change-password

More Information#

There might be more information for this subject on one of the following:

• Changing Password From LDIF

---

• [#1] - A Well-Known URL for Changing Passwords - based on information obtained 2019-05-13