I have a details page. And sure, they can change password there, but they have to be logged in to do so. My concern is when they forget their password and are unable to login. I agree, a Password Recovery Datapage would be ideal. I got one created, but unable to deploy as I've reached my limit for deployed pages.