With increasing security requirements for e-mail, it has become difficult for self management of user's passwords because the corporate environment blocks notices from ArcGIS Online. The alternative that my organization has resorted to changing corporate e-mail to personal e-mail. If there was an option for both, the user can pick where to direct the update link should be sent.