To allow users to change their own password, you can create a simple module in Self-Service.
Role required: admin
Create a module in the Self-Service application called Change Password,
give it a Type of URL, and give it an
Argument of login_cpw.do. The module presents the
user with a password change form and has them validate the new password by typing it twice.