Chapter 10 Install and System Administration for FortiOS 5.0 : Using the web-based manager : Basic configurations : Changing your administrator password
  
Changing your administrator password
By default, you can log in to the web‑based manager by using the admin administrator account and no password. It is highly recommended that you add a password to the admin administrator account. For improved security, you should regularly change the admin administrator account password and the passwords for any other administrator accounts that you add.
To change an administrator’s password, go to System > Admin > Administrators, edit the administrator account, and then change the password.
For details on selecting a password, and password best practices, see “Passwords”.
For information about resetting a lost administrator’s password, see docs.fortinet.com/sysadmin.html.