expiring passwords

[louis123562]

Hello,

what do you think about the user passwords which expire after X days? We got a customer who would like to have that implemented because of GPDR. They want the user to change their password every 30 days.

Does anyone have a solution? Would it make sense to implement it as a standard for phpAuth?

Thank you, Louis

[Conver]

it would make sense if it configurable both thru main config but also user config.

[KarelWintersky]

No native implementation now.

I think, is is only one solution. Add field 'dt_user_changed_password' and check this field for all users. And send them notification email.

[Conver]

I'm not home atm, but will be beginning of next week. Then I can make a function for this, since I could use it too,

[louis123562]

sounds great :)

[Criptos]

I can do this.. I require password change every 30 days...
I would add a configuration option global , and per user configuration option...