Password Security Expiry Policy
(Force Change on Login)

for Odoo Community Edition & On Premise

Enforce a secure password policy in your Odoo instance by forcing users to change their password after a configurable expiration period. When a password is expired, the user is redirected to a special password/change_required page and cannot use Odoo until the password is updated.

Key Features

• Block users from accessing Odoo once their password is expired.
• Enable password expiration policy for all non-ROOT / non-Administrator users.
• Configure password expiration period in days (default: 90 days).
• Initialize expiration dates for all existing users with one click.
• Monitor each user's password expiration date and last password change.

User List with Password Expiration & Last Change

Dedicated view to see each user's password expiration date and last password change date.

How to Enable the Password Expiration Policy

1. Go to Settings.
2. On the left menu, click Security.
3. Enable the checkbox for Password Expiration Policy.
4. Click Save.
5. Click Initialize Expiration for All Users to generate expiration dates.

How to Set Password Expiration (Days)

1. Go to Settings > Security.
2. Set the desired number of days in the Password Expiration (days) field (default: 90).
3. Click Save.

Forced Password Change Screen

When a user's password is expired, they are redirected to /password/change_required. They must set a new password before they can access Odoo menus and continue their work.

Author: Wimpy Nastian F.
Website: https://www.linkedin.com/in/wimpynf/