---
title: 'Tutorial: Allow Users to Change Passwords from the Client Web UI'
canonical: https://openvpn.net/as-docs/v3/tutorials/tutorial--user-password-change-cws/
product: Access Server Docs
description: How to allow users to change their passwords from Access Server's Client Web UI.
---

# Tutorial: Allow Users to Change Passwords from the Client Web UI

## Overview

Local authentication is Access Server's default authentication method, where Access Server stores usernames and passwords in the configuration database files. Local authentication is a simple and portable authentication system. You can copy the configuration database — keeping the same usernames and passwords — to a new installation if you need to move to a new Access Server server.

With local authentication, you can allow users to change their passwords from the Client Web UI at the desired access control level.

## Prerequisites

- An installed Access Server.
- Admin Web UI access.

## Step 1: Allow password changes globally

1. Sign in to the Admin Web UI.
2. Click **Authentication**.
3. Click on the **Local** tab.
4. Set **Allow local users to change password** to **On**.
5. Click **Save** and **Restart**.

---

Prev: [Tutorial: How to Use Local User Authentication](https://openvpn.net/as-docs/v3/tutorials/tutorial--local-auth.md)
Next: [Tutorial: Manage the Local Authentication Method from the Command-Line Interface](https://openvpn.net/as-docs/v3/tutorials/tutorial--local-auth-command-line.md)
Index: https://openvpn.net/as-docs/llms.txt