Explain what the user needs to change to create his own password