---
title: "Unusual password change"
slug: "unusual-password-change"
updated: 2026-11-03T14:48:01Z
published: 2026-11-03T14:48:01Z
canonical: "docs.senhasegura.io/unusual-password-change"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.senhasegura.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Unusual password change

This document provides information about the **Unusual password change** report screen, which displays a report with details on manual changes made to credential records, typically managed automatically by **PAM Core**.

## Path to access

1. On **Segura™ Platform**, in the navigation bar, hover over the **Products menu** and select **User Behavior**.
2. In the side menu, select **Behavior analysis > Unusual password change**.

## Actions menu

| Item | Type | Description |
| --- | --- | --- |
| **Actions** | Dropdown menu | Displays the options: *Print report*, *Export CSV,* and *Schedule report*. |

## Search fields

| Item | Type | Description |
| --- | --- | --- |
| **ID** | Text field | Filters password changes by the user's unique identification code. |
| **Origin** | Text field | Filters password changes by the IP address of the user who changed the password. |
| **User** | Text field | Filters password changes by the personal name of the user who changed the password. |
| **Device** | Text field | Filters password changes by the device associated with the credential used. |
| **Username** | Text field | Filters password changes by the **Segura™ Platform** username associated with the credential. |
| **Credential type** | Dropdown menu | Filters password changes by the type of credential used in the operation. Clear the field to enable the **All** option. |
| **Additional information** | Text field | Filters password changes by the additional information associated with the credential. |
| **Change date** | Date picker | Filters password changes by the period in which they were made. |

## Report fields

- **ID**.
- **Origin**.
- **User**.
- **Device**.
- **Username**.
- **Credential type**.
- **Additional information**.
- **Change date**: date and time of the password change.
- **Risk**: risk score associated with the operation.
- **Actions**:
  - **History**: opens the [Credential password history](/v4-2/docs/pam-credential-all-credentials#credential-password-history-screen) screen.

Info

By default, the report displays 30 records per screen. To go to the next screen, click the forward buttons at the end of the report.