Acceptance Criteria Writer

Primary Scenario: Given a registered user who is logged in, When they navigate to Account Settings and click Change Password, Then they are presented with a form requiring their current password, a new password, and a confirmation field. Alternate Scenario 1: Given a user who enters a new password that does not meet complexity requirements, When they submit the form, Then an inline error message specifies exactly which requirement was not met and the form is not submitted. Alternate Scenario 2: Given a user who enters a new password that matches the confirmation field and meets all requirements, When they submit the form, Then their password is updated, they receive a confirmation email, and they are returned to the Account Settings page. Edge Case 1: Given a user who submits the change password form with their current password entered incorrectly, Then the form is rejected with a clear error and the account is not locked after a single failed attempt. Edge Case 2: Given a user who attempts to reuse their current password as the new password, Then the form displays an error message stating that the new password must differ from the current one. Non-Functional Criterion: The password change form must be fully navigable and operable via keyboard alone and must meet WCAG 2.1 AA contrast standards.