How to force the user to change his password after first login?

I want to force the user to change his password after his first login. Now, where should I put the redirection code to ChangePassword page ?

• If I put it in the Page_Load of Default page, user can move to any page because he is Authenticated.

• If I put it in the Page_Load of Master page, the ChangePassword page uses the same master page, and it'll enter in an infinit loop of redirections.

  I though of ignoring the redirection if the Page is the ChagePassword page from the Master page, and I found this answer which says:

  This sounds like a bad idea to start with. The idea of the master is that it shouldn't care what page is there as this is all common code for each page.

Any suggestion!