User menu / Configuration / Security / Password management
Maximum password age
You can define how long a password is valid in days here.
Prompt for password change
Here, you can define how many days before a password expires a
prompt will be sent to the user to change their password.
Password can be changed after expiration
Once a password has expired, this option provides a deadline when the users
have to have changed their password by.