I've successfully "changed" it twice, directly from password1 to password1 without an intervening password2.

You really have to be sneaky when you try to 'break' programs. Because that's what users do 'by accident.' LOL