def password(request):
   if request.method == 'POST':
   username = request.POST.get('username')
   email = request.POST.get('email')
   novasenha = request.POST.get('novasenha')

       user = User.objects.get(username=username)
       user.set_password(novasenha)
       user.save()
       messages.success(request,'Senha alterada com sucesso!')
else:
       messages.success(request, 'Dados errados')
       return render(request,'password_form.html')

return render(request,'password_form.html')

<div class="container">
    <form method="POST">
        {% csrf_token %}
        <label>Usuário</label>
        <input type="text" name="username"><br>
        <br>
        <label>E-mail</label>
        <input type="email" name="email"><br>
        <br>
        <label>Nova Senha</label>
        <input type="password" name="novasenha"><br>
        <br>
    <button type="submit">SALVAR</button>
    </form>
</div>