When I first got setup with a community account, I had to go through support to get the default password changed. They essentially asked if this was actually important however, from an info-security standpoint this is essential. After quite a bit of back and forth, I was finally able to get it changed. Users should not have to contact support to get the default password for any account customized to each user.
The explanation we received when asking if we can change our own password for the Help and Community sites is that nothing on the site is confidential. However, from a user standpoint, it's confusing to have multiple passwords for different purposes in Workfront (e.g., we use SAML for production environment so don't even need a password, have a password for the sandbox, and a different password for Help and Community). We need the ability to keep all of our passwords in sync and users need to be able to change passwords when they want to.
