Change Password

The change password dialog can be invoked using:

The dialog prompts you to change the password for an identity that supports password changing. Both the Kerberos v5 provider and the KeyStore provider support changing passwords.

Once you select the identity for which you are changing the password, you need to enter the current password along with the new password twice. Finally click the Finish button to continue with the password change operation.

Similar to the New credentials operation, you can change the target identity using the identity selector at the top of the dialog.

Guidelines for choosing a good password can be found here.

When you type into the password fields of the dialog box characters are replaced with bullets. The program accepts only printable characters for new passwords, i.e., characters between ASCII codes 0x20 and 0x7E.

When you have entered the new password twice consistently, the program attempts to change the password via a dialogue with the Kerberos administrative server. Some Kerberos sites, including MIT's Athena environment, check the password's strength before allowing the change to take place and notifies you if it determines that the password is weak.


The Kerberos v5 provider may prompt you to change the password during a New credentials operation if the KDC indicates that your password has expired and needs to be changed.


Changing the password of a Kerberos v5 principal might fail if Network Address Translation is in use. Machines with IP addresses 192.168.x.x, 172.x.x.x or 10.x.x.x are often used in conjunction with Network Address Translation.


This command will not change your local machine password unless you login to your computer using a Windows Domain account or otherwise authenticate using an MIT Kerberos identity