How To change Login Password for 3CX web client

[Kwang Mien]

Hi,

I am using 3cx version 18 (update 6)

I am trying to change my login password for my 3cx web client. However, i could not find any option to reset my password.

Can anyone advise on this ?

Thanks.

Regards,
Kwang Mien

 

[Lee Cramman]

In the web client:

Admin > Users > Click yourself > Reset Password (should appear in blue below the profile picture)

 

[AndreasC_3CX]

Hello,
Thank you for posting in the forums.
If you are an Admin, this can be done for you or your users as suggested by @Lee Cramman
If you are a user, you can only resend your current credentials to the email that is linked to your extension number.
This can be done from the WebClient > Menu/ 3 dots to the left (...) > Settings > General tab > Resend credentials.

 

[IP Développement]

So, before user was able to choose his password, and administrator can retrieve their password in clear text (not GDPR compliant and really bad for security)

Now, they can't change their password, so they have to write it or save it in password managers, and administrators can still get user password in clear text...

Downgrading security and privacy ......

Il would be nice if 3CX start getting closer to better security rules (user can choose himself his password, administrator can't know it -just reset it-, and password hashed in database, not in clear text)

thanks a lot
best wishes

 

[SteveITS]

In Settings/Apps/Options there is a checkbox "Hide Change Passwords for 3CX Apps" that hides the change password button.

 

[AndreasC_3CX]

Thank you for your reply to the post.
As mentioned by @SteveITS , this is correct, however, only available for Dedicated systems at the moment.
If you have this disabled, your users are able to change their password themselves.

 

[IP Développement]

Thank you for that information @SteveITS and @AndreasC_3CX .
I didn’t see it on the update announcements. Our customers are all on a dedicated system, so it's ok for them.

However, I remain convinced that 3CX must evolve on the storage of passwords, so that the administrator cannot read them.
Thanks a lot.

 

[Chris Walters]

Thank you for that information @SteveITS and @AndreasC_3CX .
I didn’t see it on the update announcements. Our customers are all on a dedicated system, so it's ok for them.

However, I remain convinced that 3CX must evolve on the storage of passwords, so that the administrator cannot read them.
Thanks a lot.

Better get used to that...