> For the complete documentation index, see [llms.txt](https://dev.guardian.hedera.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://dev.guardian.hedera.com/security-identity-and-privacy/password-management/password-change-hardening.md).

# Password Change and Security Hardening

## 1. Password Security Hardening

Changed encryption algorithm to pbkdf2 with the following parameters:

`Digest: sha512`

`Iterations: 600 000`

## 2. User passwords upgrade path

Following Guardian instance upgrade, at the first login existing users are prompted to change the password which would be encrypted using the new method.

<figure><img src="/files/qyOPIkO62MmF3rKRyV7p" alt=""><figcaption></figcaption></figure>

## 3. Change user password

Users can change passwords using the new option in their profile page.

<figure><img src="/files/zFeYcleeO8TFf0h2dZfI" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/A4aVAFKmgA5rsXynHtTi" alt=""><figcaption></figcaption></figure>