A method for verifying an authorization for setting a new password, with: automatically generating an alternative user identifier for a manually created user call sign and automatically generating an alternative security feature for a manually created security feature; - storing the alternative user identifier and the alternative security feature on a portable data carrier as well as on a central processing unit; - transferring the alternative user identifier from the portable data carrier to the central processing unit; - transferring a data signal from the central processing unit to the portable data carrier whereupon the data carrier encrypts the data signal while employing the alternative security feature and transmits it back to the central processing unit; - selecting the stored alternative security feature by the central processing unit in dependence on the transferred alternative user identifier and the stored user identifier; - decrypting the data signal transmitted back by the central processing unit while employing the selected alternative security feature; - comparing the decrypted data signal with the transferred data signal by the central processing unit; and - overwriting the manually created security feature with another security feature in case of a match of the decrypted data signal and the transferred data signal, wherein - the transferring of the alternative user identifier from the portable data carrier to the central processing unit is effected in unencrypted form, wherein the selecting of the stored alternative security feature is effected such that from several stored alternative user identifiers that one is selected which matches the received alternative user identifier and for which the alternative security feature was stored. automatically generating an alternative user identifier for a manually created user call sign and automatically generating an alternative security feature for a manually created security feature; - storing the alternative user identifier and the alternative security feature on a portable data carrier as well as on a central processing unit; - transferring the alternative user identifier from the portable data carrier to the central processing unit; - transferring a data signal from the central processing unit to the portable data carrier whereupon the data carrier encrypts the data signal while employing the alternative security feature and transmits it back to the central processing unit; - selecting the stored alternative security feature by the central processing unit in dependence on the transferred alternative user identifier and the stored user identifier; - decrypting the data signal transmitted back by the central processing unit while employing the selected alternative security feature; - comparing the decrypted data signal with the transferred data signal by the central processing unit; and - overwriting the manually created security feature with another security feature in case of a match of the decrypted data signal and the transferred data signal, wherein - the transferring of the alternative user identifier from the portable data carrier to the central processing unit is effected in unencrypted form, wherein the selecting of the stored alternative security feature is effected such that from several stored alternative user identifiers that one is selected which matches the received alternative user identifier and for which the alternative security feature was stored.