# Ability to disallow changing passwords

**URL:** <https://meta.discourse.org/t/ability-to-disallow-changing-passwords/17961>\
**Category:** Feature\
**Created:** [2014年七月23日 20:08 UTC](https://meta.discourse.org/t/ability-to-disallow-changing-passwords/17961 "2014-07-23T20:08:06Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![shivermetimbers](https://avatars.discourse-cdn.com/v4/letter/s/cab0a1/32.png) [@shivermetimbers](https://meta.discourse.org/u/shivermetimbers)\
**Post date:** [2014年七月23日 20:08 UTC](https://meta.discourse.org/t/ability-to-disallow-changing-passwords/17961/1 "2014-07-23T20:08:06Z")

</div>

We’ve set up custom authentication with our Discourse instance, and the only way to log in is through our auth service. We do not allow local logins. This means that the password field is pretty useless to us and could be confusing to our users. Could we have the option to hide the Set Password preference on the user preferences page? Perhaps if we’ve disabled local logins in Admin Settings then this automatically disappears?

**Option on user preferences page**

 ![](https://global.discourse-cdn.com/meta/original/3X/3/9/3959c61c6d8fb2e1aeaa4544f3bb264aac94fd1a.png) 

**Local logins disabled in admin settings**

 ![](https://global.discourse-cdn.com/meta/original/3X/e/f/ef628d3a9c9368282c0b568f0401f36d1f8fa9bb.png)

---

<div class="post-metadata">

**Author:** ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)\
**Post date:** [2014年七月24日 06:40 UTC](https://meta.discourse.org/t/ability-to-disallow-changing-passwords/17961/2 "2014-07-24T06:40:55Z")

</div>

I know SSO automatically disables this. But yes, without local accounts enabled you don’t have a local password to display, either.

---

<div class="post-metadata">

**Author:** ![shivermetimbers](https://avatars.discourse-cdn.com/v4/letter/s/cab0a1/32.png) [@shivermetimbers](https://meta.discourse.org/u/shivermetimbers)\
**Post date:** [2014年七月24日 20:23 UTC](https://meta.discourse.org/t/ability-to-disallow-changing-passwords/17961/3 "2014-07-24T20:23:20Z")

</div>

Is this something your team is planning on working on? With local logins disabled, the Set Password field is still available, which seems odd.

---

<div class="post-metadata">

**Author:** ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)\
**Post date:** [2014年七月25日 03:05 UTC](https://meta.discourse.org/t/ability-to-disallow-changing-passwords/17961/4 "2014-07-25T03:05:03Z")

</div>

A PR would be handy, we are flooded with work leading to v1.

---

<div class="post-metadata">

**Author:** ![shivermetimbers](https://avatars.discourse-cdn.com/v4/letter/s/cab0a1/32.png) [@shivermetimbers](https://meta.discourse.org/u/shivermetimbers)\
**Post date:** [2014年七月25日 21:27 UTC](https://meta.discourse.org/t/ability-to-disallow-changing-passwords/17961/5 "2014-07-25T21:27:29Z")

</div>

Sure thing 🙂

[https://github.com/discourse/discourse/pull/2588](https://github.com/discourse/discourse/pull/2588)

---

<div class="post-metadata">

**Author:** ![chapoi](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/chapoi/32/537252_2.png) [@chapoi](https://meta.discourse.org/u/chapoi)\
**Post date:** [2025年十二月4日 11:31 UTC](https://meta.discourse.org/t/ability-to-disallow-changing-passwords/17961/6 "2025-12-04T11:31:07Z")

</div>