Password management

Users module User menu / Configuration / Security / Password management

Maximum password age

You can define how long a password is valid in days here.

Prompt for password change

Here, you can define how many days before a password expires a prompt will be sent to the user to change their password.

Password can be changed after expiration

Once a password has expired, this option provides a deadline when the users have to have changed their password by.