You can force all passwords to expire within a certain time period after they are created. Accounts with expired passwords are locked and an administrator must reset the account using the username command. However, a user can change the password before expires using the password command.