The first time a new user is created, he/she will get a system generated password assigned. Users need to log in the software with the system generated password and then change their own password. If ever they lose their password, the super user can have the system generate a new password for them and they can repeat the process. They can change their password as often as they want.