Ok, so I'm trying to change the password on my ColdFusion install to something that includes tags (< and >). In the admin it say's the password has been updated ok but when I logout an try it it's still set to the old one. If I remove either of the < or > characters it works. Now here is the best part, I've had a password with both those characters before but I set it on install of ColdFusion when it was accepting the password from a shell prompt (command line for you Windows users). I'm thinking that whatever encryption or validation algorithm is being run in the admin is failing but not actually throwing an error. Does anyone know what's going on or have seen this before?