# Admin Password Management Update

## Added features

- Student List now shows **Print Password** and **Change Password** for System Admin and Admin users.
- Staff Register now shows the same two password-management actions.
- Existing passwords are never displayed because the system stores password hashes only.
- Print Password creates a new secure temporary password and a printable official credential slip.
- Change Password allows the administrator to set a custom temporary password and optionally print the slip.
- The administrator must confirm the action using their own current password.
- Reset users are forced to create a private password at first login.
- Temporary plaintext passwords are kept only in the administrator's session for 15 minutes and are not stored in the database.
- Legacy student or staff records without a linked account receive a linked account during the reset workflow.
- Password actions are logged in the user activity log.
- The credential slip uses the institution's saved official letterhead.

## Security rules

- Only System Admin and Admin roles can use the password actions.
- Passwords must be at least eight characters and contain a letter and a number.
- Password slips are protected by a random session token and expire after 15 minutes.
- Browser caching is disabled on the password-slip page.

## Database

No database migration is required. The existing `must_change_password` and `last_password_reset_at` fields are used.
