If Two-Factor Authentication has been enabled, we cannot change passwords through the Edit Your Profile tabs.
This error appears if TFA is configured: Password : Incorrect password, please try again.
Once the TFA configuration is disabled for that account, the password can then be changed.
When a user requests a new password from "Forgot Login?", I have an auto-action SET `requireReset` = 1 so they must change their password on the first login with that temp password. A user with TFA could not set a new password. We serendipitously found that having TFA enabled was the problem.
Is the password change trying to verify the current password on the change form by a means that requires the TFA code, but there's no field to put the current code in?
--
David Riviera