# Change an expired password at sign-in

If XgenPlus shows "Your password is expired" or "Change your password to continue" when you sign in, enter a new password in **New Password** and **Confirm Password** and submit. It must meet the rules shown, usually a capital letter, a digit and a special character, and cannot be one of your last 3 passwords.

## How to change an expired password at sign-in

1. Sign in as usual. If your password has expired, the change screen opens before your mailbox.
2. Enter the new password in **New Password** and again in **Confirm Password**.
3. Check it against the rules shown on screen.
4. Submit, then continue to your mailbox.

## When to use it

> A bank's IT team sets passwords to expire every three months. When Meera signs in on the due date, XgenPlus asks for a new password first, and her mailbox opens once she sets one.

## Password rules

| Rule | Detail |
|---|---|
| Capital letter | At least one, if your organisation requires it. |
| Digit | At least one, if your organisation requires it. |
| Special character | One of `* ! _ : ^ @` or the vertical bar, if your organisation requires it. |
| Characters you cannot use | `# % ' \ ~ & + "` and the backtick. |
| History | You cannot reuse your last 3 passwords. |

## Good to know

- Your administrator decides how long passwords last and which rules apply.
- The administrator can also ask you to change your password at your next sign-in at any time.

## Common questions

**Why must I change my password on my first sign-in?**

Your administrator created the account with a temporary password and asked for a change at first login, so only you know the new one.

**Can I reuse an old password?**

No. XgenPlus refuses any of your last 3 passwords.


Source: https://docs.xgenplus.com/security/change-expired-password/