Yes, your users can change their email password. They should login to their account control panel at http://www.yourdomain.com/personal
After they login they can change their password in the first screen they see.
We recommend that after an account has been created each user change their own password so only they know it. This is best for security reasons.