1. Functionality
1.1. All fields blank
1.1.1. error messages should be correct
1.2. correct current password
1.2.1. system accepts the correct current password
1.2.2. new password same as current password
1.2.3. new password different from current password
1.2.3.1. system accpets
1.2.3.2. user can login with the new password
1.2.4. accepts complicated and max length passwords
1.2.4.1. p`a~s!s@w#o$r%d^&*()_-+='";:,.<>123
1.3. incorrect current password
1.3.1. 8 char new password matching
1.3.1.1. error message for incorrect username
1.3.1.1.1. 21642
1.3.2. 8 char passwrord not matching
1.3.2.1. client side error message for password does not match
1.3.3. short matching password
1.3.3.1. error message for short password
1.3.4. short not matching password
1.3.4.1. error message for short password and non matching password
1.3.5. short old password
1.3.6. long old password
1.4. New & Confirm Password
1.4.1. should not accept less than 8 char
1.4.2. should accept any 8 characrters
1.4.3. should match
1.4.4. new and confirm password error message should be displayed without clicking save button
1.4.5. accepts complicated and long passwords
1.4.5.1. p`a~s!s@w#o$r%d^&*()_-+='";:,.<>123
1.4.6. should not accept above the maximum used in registration(40 characters)
1.5. window
1.5.1. change password opens new window
1.5.2. close window button is working fine
1.5.3. save button is deaactivated till all password fields are filled
1.5.3.1. 21643
1.5.4. your password has changed message
1.5.4.1. dispalyed correctly
1.5.4.2. with x button to close
1.6. Security
1.6.1. password is saved in db Hashed
1.7. Login
1.7.1. customer can login with the new password if it is same as old password
1.7.2. customer can login with the new password if it is different from old password
1.7.3. customer can login with long complicated password
2. UI
2.1. Save button color should be green
2.2. in design save button has different color when hover
3. Security
3.1. new table PasswordBreachStats
3.1.1. UserId
3.1.1.1. userID of account
3.1.2. Strength
3.1.2.1. will always be 2 based on code
3.1.2.1.1. weak password value score = <4
3.1.2.1.2. good password score = <7
3.1.2.1.3. strong password score = >7
3.1.3. NumberofBreaches
3.1.4. AccountCreatedonUTC
3.1.4.1. time account is created
3.1.5. PasswordGeneratedOnUtc
3.1.5.1. time password is created
3.1.5.2. will be updated when password is changed
3.1.6. only log users with weak passwords
3.1.6.1. if user originally has a strong password and changes to a weak one
3.1.6.1.1. data inserted into table
3.1.6.2. if user originally has a weak password and updates to a strong one
3.1.6.2.1. do not update passwordgeneratedonutc column