All users are initially assigned unique temporary passwords. A unique temporary password is also assigned if your password has to be re-set for any reason. Temporary passwords must be changed at first login. In this way no-one should know your password except yourself. Keep it somewhere safe but well disguised so that it cannot be accessed by anyone else.
After logging in with a temporary password, the Password Change page is shown.
Enter a New Password and Confirm by entering it again.
Then enter a personal question and answer. You may answer the default question or you may replace this with something else. Make sure that the Answer is something that you will remember (including the format) but which is unlikely to be known to anyone else.
Press Submit to commit your new password and Q&A.