Password can be updated from this settings screen. A dedicated reset-email flow can be added in a later security phase.