Body: <p>Is there any way to see or change a user's password in my organisation through admin controls?</p>
  <p>Thank you :)</p>
  
Comments.ContentLicense: CC BY-SA 4.0
Comments.CreationDate: 2023-04-25T11:17:03.990Z
Comments.Text: Hi, welcome to SE. If you could provide some info on what CMS your instance is running on I'm sure someone in the community can help. But in brief you should be able to as long as you have administrator rights on your system.
Comments.UserDisplayName: RebeccaTregenna
Comments.ContentLicense: CC BY-SA 4.0
Comments.CreationDate: 2023-04-25T19:32:00.813Z
Comments.Text: Agree - the password is a CMS option, therefore not a CRM question. Also note that if you are using Spark pls make that clear in the question.
Comments.UserDisplayName: petednz - fuzion
Comments.ContentLicense: CC BY-SA 4.0
Comments.CreationDate: 2023-05-05T20:05:02.080Z
Comments.Text: Also please note that you shouldn't be able to see another user's password (or indeed your own password once you've saved it). You should only be able to reset the password. Good security practice is that passwords are 'hashed' before they are stored in a database. This means that if an attacker has access to a database they are unable to (easily) decrypt the passwords. See https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html
Comments.UserDisplayName: William Mortada
Tags: <civimember>
Title: Can I see/change user's password as an admin?
ThreadText: # Can I see/change user's password as an admin?
  
  (Asked by: username_0 on 2023-04-25)
  
  Is there any way to see or change a user's password in my organisation through admin controls?
  
  Thank you :)
  
  **Tags:** civimember
  
  > **Comments:**
  > **username_1**: Hi, welcome to SE. If you could provide some info on what CMS your instance is running on I'm sure someone in the community can help. But in brief you should be able to as long as you have administrator rights on your system.  
  > **username_2**: Agree - the password is a CMS option, therefore not a CRM question. Also note that if you are using Spark pls make that clear in the question.  
  > **username_3**: Also please note that you shouldn't be able to see another user's password (or indeed your own password once you've saved it). You should only be able to reset the password. Good security practice is that passwords are 'hashed' before they are stored in a database. This means that if an attacker has access to a database they are unable to (easily) decrypt the passwords. See https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html  
  
  ---
  
  ## 0 answers
  
  