Requester Identity
Record full legal name and contact details plus any identity proofing method used (MFA, SSO assertion, government ID) to support authorization and audit requirements.
A consistent Password Change Request reduces errors, speeds processing, and documents authorization for audits or incident response. It centralizes identity verification, clarifies approval paths, and helps meet electronic record requirements under ESIGN and applicable state law.
Common users who submit or process Password Change Requests include employees, contractors, IT administrators, account owners, and delegated approvers responsible for access control.
Assigning roles clearly on the form reduces confusion, speeds approval, and ensures only authorized personnel can request or confirm credential changes.
Record full legal name and contact details plus any identity proofing method used (MFA, SSO assertion, government ID) to support authorization and audit requirements.
Provide the exact username, account identifier, system and environment to prevent changes to the wrong asset or environment that could disrupt operations.
Document how the requestor was authenticated (SMS code, authenticator app, SSO token, KBA) and include timestamps to strengthen non‑repudiation evidence.
List approvers, their titles, and signatures with dates to demonstrate explicit authorization for privileged or third‑party access changes.
Specify when the password becomes active, whether old credentials are revoked immediately, and any overlap period for service continuity.
Capture timestamped events, user IDs, and IP addresses for submission, approval, and completion to support incident response and compliance reviews.
Electronic Password Change Requests should use secure formats, reliable authentication, and integrations that preserve audit details.
| Field | Configuration |
|---|---|
| Authentication Method | Email link plus SMS code for medium assurance |
| Approval Required | Manager or system owner for privileged accounts |
| Notification Rule | Notify requestor and approver after completion |
| Record Retention | Archive PDF and audit log for required period |
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial | Varies by plan | Varies by plan | Varies by plan | Varies by plan |
| Bulk Send | Yes (premium tier) | Yes | Yes | Yes | Limited |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes (BAA) | Yes | Yes | No | No |
| Envelope Cap | No cap | 100 envelopes/user/year | Varies by plan | Varies by plan | Varies by plan |
Critical security events should be handled same day and prioritized by the security team.
Routine password changes are typically processed within 24–48 hours business time.
Escalated or privileged account requests may require 3–5 business days for verification and approval.
Identity verifications can delay processing up to 7 days if additional documents are required.
Archive the final signed request and audit log immediately after completion.