The Web Application Security Working Group has published a First Public Working Draft of A Well-Known URL for Changing Passwords. This specification defines a well-known URL that sites can use to make their change password forms discoverable by tools. This simple affordance provides a way for software to help the user find the way to change their password.