# As a logged in user I should know if a password is about to expire and should be changed

**URL:** <https://community.passbolt.com/t/as-a-logged-in-user-i-should-know-if-a-password-is-about-to-expire-and-should-be-changed/61>\
**Category:** Done!\
**Tags:** security, rotation, expiry\
**Created:** [November 1, 2017, 7:57am UTC](https://community.passbolt.com/t/as-a-logged-in-user-i-should-know-if-a-password-is-about-to-expire-and-should-be-changed/61 "2017-11-01T07:57:42Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![remy](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/remy/32/17_2.png) [@remy](https://community.passbolt.com/u/remy)\
**Post date:** [November 1, 2017, 7:57am UTC](https://community.passbolt.com/t/as-a-logged-in-user-i-should-know-if-a-password-is-about-to-expire-and-should-be-changed/61/1 "2017-11-01T07:57:42Z")

</div>

**Q1. What is the problem that you are trying to solve?**  
In some systems passwords are set to expire after a while. Some organizations also requires by policy to change ones password once in a while. Right now it is not possible to know visually or using notification if a password is about to expire and should be changed.

**Q2 - Who is impacted?**  
People using password that need to be renewed.

**Q3 - Why is it important and/or urgent?**  
This is a common use case and part of password hygiene to renew passwords.

**Q4 - What is your proposed solution? (optional)**  
For example, during the password creation one ca set a lifetime for a password of 2 months. On the sidebar and the grid there will be an highlight for outdated or soon to be outdated credentials. A second dependent feature would be to get a periodic mail notification of every passwords near the ending their lifetime.

Ref. [As a user, I would like to get info about the password lifecycle · Issue #91 · passbolt/passbolt\_api · GitHub](https://github.com/passbolt/passbolt_api/issues/91)

**Q5. Community support**  
People can vote for this idea to show traction:

_Poll ([view on site](https://community.passbolt.com/t/as-a-logged-in-user-i-should-know-if-a-password-is-about-to-expire-and-should-be-changed/61/1))_

---

<div class="post-metadata">

**Author:** ![urist](https://avatars.discourse-cdn.com/v4/letter/u/87869e/32.png) [@urist](https://community.passbolt.com/u/urist)\
**Post date:** [February 27, 2018, 4:52pm UTC](https://community.passbolt.com/t/as-a-logged-in-user-i-should-know-if-a-password-is-about-to-expire-and-should-be-changed/61/2 "2018-02-27T16:52:38Z")

</div>

With recent changes to law over here this would be extremely useful since we are required to change passwords every few weeks now.

---

<div class="post-metadata">

**Author:** ![cedric](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/cedric/32/3868_2.png) [@cedric](https://community.passbolt.com/u/cedric)\
**Post date:** [August 29, 2023, 6:34pm UTC](https://community.passbolt.com/t/as-a-logged-in-user-i-should-know-if-a-password-is-about-to-expire-and-should-be-changed/61/3 "2023-08-29T18:34:51Z")

</div>

The feature is under active development, checkout the specifications: [Password Expiry (Reloaded) - Functional and Technical Specifications - Google Docs](https://docs.google.com/document/d/1gVpiU5ejVxgSmpWg6Tt0eZ_7s92RI7cfJhfiD_fiiDs)

---

<div class="post-metadata">

**Author:** ![upperlimit](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/upperlimit/32/4110_2.png) [@upperlimit](https://community.passbolt.com/u/upperlimit)\
**Post date:** [September 6, 2024, 8:00pm UTC](https://community.passbolt.com/t/as-a-logged-in-user-i-should-know-if-a-password-is-about-to-expire-and-should-be-changed/61/4 "2024-09-06T20:00:38Z")

</div>

This is identical to [Alert before expiration - #4 by upperlimit](https://community.passbolt.com/t/alert-before-expiration/10124/4)  
Has this been implemented?