login authentication password-expire

Last Updated : Sep 08, 2015 |

Use the login authentication password-expire command to cause all local user passwords to expire after a specified number of days. For existing accounts, the expiration policy starts on the day you use this command; for new accounts, the expiration policy starts on the day they are created. Accounts with expired passwords are locked and require an administrator to reset the account using the username command. However, a user can change the password before it expires using the password command. Starting 10 days before password expiration, every time the user logs on a message appears, informing the user that the password will expire in n days.

Use the no form of the command to deactivate the password expiration policy. By default, the password expiration policy is deactivated for backward compatibility.

Note:

The no form of the command does not re-enable accounts deactivated because of the password expiration policy. To re-enable an account, an administrator must run the username command and re-configure the account using the same user name and password.

Note:

This command does not apply to the root account.

Syntax

login authentication password-expire days

no login authentication password-expire

Parameters

Parameter

Description

Possible Values

Default Value

days

The number of days after which an account’s password expires

2-365

User Level

admin

Context

general

Example

To set password expiration to six months:

Gxxx-001(super)# login authentication inactivity-period 180

Related Commands

  • login authentication inactivity-period

  • login authentication lockout

  • login authentication password-no-change-interval

  • login authentication passwords-dont-reuse

  • login authentication min-password-digit-chars

  • login authentication min-password-length

  • login authentication min-password-lower-chars

  • login authentication min-password-special-chars

  • login authentication min-password-upper-chars

  • password

  • show login authentication

  • show username

  • username