> For AI agents: the complete documentation index is available at https://www.jumpserver.com/docs/llms.txt, the full documentation bundle is available at https://www.jumpserver.com/docs/llms-full.txt.

# Password Change Logs

**Password Change Logs** records changes to JumpServer platform user passwords. Use it to confirm that a password reset was expected and to identify which administrator or system action changed an account.

Open the page from **Audits > Activities > Password Change Logs**. The page header reads **User password change log**.

## Overview

Each row shows the affected user, the modifier, the remote address, and the date. The modifier can be the user, another administrator, or **System** for changes made by an automated process.

The toolbar provides search, a date range, column settings, export, and refresh.

## Prerequisites

- Sign in with an account that has the `audits.view_passwordchangelog` permission, such as a system administrator or auditor.
- A platform user password must have been changed by the user or by an administrator.

## Review password changes


1

Set the date range to the period you want to review.

2

Search for the affected user or the modifier.

3

Compare the **User** and **Modifier** columns to distinguish self-service changes from administrator resets.

![Figure 1: User password change log with user, modifier, remote address, and date.](/images/v5/jumpserver/v5_admin_pwdlog_01.png)

## Customize columns and export

Open **List preferences**, select the columns to display, and click **Confirm**. Available columns are ID, user, modifier, remote address, and date. **Restore defaults** resets the list.

![Figure 2: List preferences for password change logs.](/images/v5/jumpserver/v5_admin_pwdlog_02.png)

Click **Export**, choose **CSV** or **Excel**, select **Export all**, **Export selected**, or **Export search results**, and click **Confirm**.

## Field reference

| Field          | Description                                       |
| -------------- | ------------------------------------------------- |
| User           | Platform user whose password was changed.         |
| Modifier       | User or system process that performed the change. |
| Remote address | Source address of the operation.                  |
| Date           | When the password was changed.                    |
| ID             | Optional. Record identifier.                      |

## Notes


Note

This page covers JumpServer login passwords only. Changes to asset account secrets are recorded in PAM under [Account Activities](https://www.jumpserver.com/docs/features/pam/activities/account-activities.md) and are managed through [Change Secrets](https://www.jumpserver.com/docs/features/pam/security/change-secrets.md).

## Related topics

- [Login Logs](https://www.jumpserver.com/docs/features/audits/activities/login-logs.md)
- [Operate Logs](https://www.jumpserver.com/docs/features/audits/activities/operate-logs.md)