login authentication password-expire

Last Updated : Sep 08, 2015 |
Use the login authentication password-expire command to cause all local user passwords to expire after a specified number of days. For existing accounts, the expiration policy starts on the day you use this command; for new accounts, the expiration policy starts on the day they are created. Accounts with expired passwords are locked and require an administrator to reset the account using the username command. However, a user can change the password before it expires using the password command. Starting 10 days before password expiration, every time the user logs on a message appears, informing the user that the password will expire in n days.
Prolog information
Use the no form of the command to deactivate the password expiration policy. By default, the password expiration policy is deactivated for backward compatibility.
Note:
The no form of the command does not re-enable accounts deactivated because of the password expiration policy. To re-enable an account, an administrator must run the username command and re-configure the account using the same user name and password.
Note:
This command does not apply to the root account.

Syntax

login authentication password-expire days
no login authentication password-expire

Parameters

Parameter
Description
Possible Values
Default Value
days
The number of days after which an account’s password expires

User Level

admin

Context

general

Example

To set password expiration to six months:
Gxxx-001(super)# login authentication inactivity-period 180

Related Commands

  • login authentication inactivity-period
  • login authentication lockout
  • login authentication password-no-change-interval
  • login authentication passwords-dont-reuse
  • login authentication min-password-digit-chars
  • login authentication min-password-length
  • login authentication min-password-lower-chars
  • login authentication min-password-special-chars
  • login authentication min-password-upper-chars
  • password
  • show login authentication
  • show username
  • username