Password change form

Issue Description

Any idea why both the “New Password” and “Current Password” fields are marked as “optional” in the user’s credentials area, when they clearly aren’t? Also, why the awkward wording — “Secret value of the account” and “The current secret value of the account, used for password verification”?

Expected Behavior

Clear labeling of fields.

Actual Behavior

Reproduction Steps

On the users’s admin page > Credentials> Password.

Relevant Log Output

Stalwart Version

v0.16.x

Installation Method

Docker

Database Backend

RocksDB

Blob Storage

RocksDB

Search Engine

Internal

Directory Backend

Internal

Additional Context

I have reviewed the documentation and FAQ and confirm that my issue is NOT addressed there.

on

I have searched this support forum (open and closed topics) and confirm this is not a duplicate.

on

I understand that topics in this category are triaged by a bot first but a human reply will follow up. If I’d prefer a human-only reply, I’ll add the no-ai tag to my topic.

on

Let me look into the WebUI source to find the relevant labels for these fields.

The are optional because they are not needed in all cases. For example, changing the MFA code does not require entering a new password again.