I just realised that my site has a profile page where users can change their password.
I use s2Member to keep some pages private for some users, as part of that plugin a profile page is created.
Users joining using the GD login page can also change their password there.
