Skip to content

Add change password URL for privacy.com#1030

Open
amahjoor wants to merge 1 commit into
apple:mainfrom
amahjoor:add-privacy-change-password-url
Open

Add change password URL for privacy.com#1030
amahjoor wants to merge 1 commit into
apple:mainfrom
amahjoor:add-privacy-change-password-url

Conversation

@amahjoor

@amahjoor amahjoor commented Mar 9, 2026

Copy link
Copy Markdown

Overall Checklist

for change-password-URLs.json

  • There is no Well-Known URL for Changing Passwords (https://example.com/.well-known/change-password)
  • The URL either makes the experience better or no worse than being directed to just the domain in a non-logged-in state

@rmondello

Copy link
Copy Markdown
Contributor

https://app.privacy.com/reset reads like a reset password page; this is better than nothing, but is there a URL that actually represents changing the password for a user who knows their current password?

@amahjoor

amahjoor commented Mar 9, 2026

Copy link
Copy Markdown
Author

When a user is logged out, https://app.privacy.com/reset serves as the password reset page, but when a logged-in user visits the same URL they are redirected to https://app.privacy.com/account#security where they can change their password while authenticated. I've attached a video showing what I mean.

privacy_pw.mp4

@amahjoor

Copy link
Copy Markdown
Author

Following up on this @rmondello - let me know if this is what you were looking for or if you had something else in mind.

"portlandgeneral.com": "https://portlandgeneral.com/secure/profile/change-password",
"poshmark.com": "https://poshmark.com/user/account-info",
"ppomppu.co.kr": "https://www.ppomppu.co.kr/myinfo/profile.php",
"privacy.com": "https://app.privacy.com/reset",

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
"privacy.com": "https://app.privacy.com/reset",
"privacy.com": "https://app.privacy.com/account#security",

It's very possible that password managers that open this URL will do so in a browser where the user isn't already signed in. Since this is for changing passwords, this should be https://app.privacy.com/account#security, which appears to take you directly to the change password page after sign in.

@apple apple deleted a comment from jason-fells-research Jun 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants