# Ability to change self passsword

**URL:** <https://discuss.elastic.co/t/ability-to-change-self-passsword/293086>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [December 29, 2021, 5:34am UTC](https://discuss.elastic.co/t/ability-to-change-self-passsword/293086 "2021-12-29T05:34:44Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Atul\_Chadha](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/atul_chadha/32/75469_2.png) [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\
**Post date:** [December 29, 2021, 5:34am UTC](https://discuss.elastic.co/t/ability-to-change-self-passsword/293086/1 "2021-12-29T05:34:44Z")

</div>

I am setting up file based auth for the users using the below link , however it appears the user is not able to update the password by self. Am i missing anything ?

> **[elasticsearch-users | Elasticsearch Guide \[7.16\] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/users-command.html)**

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/9/b/9b53c266963eec03b459469b6006e2a56c60c051.png)

---

<div class="post-metadata">

**Author:** ![FALEN](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/falen/32/82754_2.png) [@FALEN](https://discuss.elastic.co/u/FALEN)\
**Post date:** [December 29, 2021, 12:17pm UTC](https://discuss.elastic.co/t/ability-to-change-self-passsword/293086/2 "2021-12-29T12:17:28Z")

</div>

They can change their password via API, but im not sure about kibana interface

> **[Change passwords API | Elasticsearch Guide \[7.16\] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/security-api-change-password.html)**

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [December 29, 2021, 11:57pm UTC](https://discuss.elastic.co/t/ability-to-change-self-passsword/293086/3 "2021-12-29T23:57:11Z")

</div>

There is no API for changing the password of file based users. The intent with the file realm is that you manage it from outside the cluster. If you want to have users that are managed from within the cluster you should use the native (API based) realm.

---

<div class="post-metadata">

**Author:** ![Atul\_Chadha](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/atul_chadha/32/75469_2.png) [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\
**Post date:** [December 30, 2021, 8:21am UTC](https://discuss.elastic.co/t/ability-to-change-self-passsword/293086/4 "2021-12-30T08:21:23Z")

</div>

Thank you @TimV , native realm works ! Do you know if there is any logging for password changes in basic license ?

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [December 30, 2021, 3:51pm UTC](https://discuss.elastic.co/t/ability-to-change-self-passsword/293086/5 "2021-12-30T15:51:24Z")

</div>

Audit logging with other enterprise security feature are commercially licensed features.

See [Here](https://www.elastic.co/subscriptions)

 ![Screen Shot 2021-12-30 at 7.49.46 AM](https://us1.discourse-cdn.com/elastic/original/3X/8/b/8b89ad32b8c3956b5795e41b4dbae53160a7e8e1.png)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 27, 2022, 3:51pm UTC](https://discuss.elastic.co/t/ability-to-change-self-passsword/293086/6 "2022-01-27T15:51:59Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.