Hence our mentioning that the user must receive a mail notifying of the password change.