I am reviewing a banking site and the site has change password link upfront on the login page with an option for old password and new password, which verifies the old password before changing to the newer password.
I would ideally place this option inside the product after login, with-in settings or My Account page. But don't have any concrete reason apart from reducing the clutter.
Is there a possible usability flow in it because I have never seen change password option near the login page? Should I let it go or raise an alarm?