As an admin, to enforce extra security for your Salesforce orgs and Experience Cloud
sites, you can expire passwords for all users. After expiring passwords, all users are prompted
to reset their password the next time they log in.
Required Editions
Available in: both Salesforce Classic and
Lightning Experience
Available in: Professional, Enterprise, Performance,
Unlimited, Developer, and Database.com Editions
User Permissions
Needed
To expire all passwords:
Reset User Passwords and Unlock Users
Note To prevent admins from expiring passwords for all users in the org, contact
Salesforce Customer Support.
Before you expire passwords, review these
considerations.
Users can be prompted to complete Device Activation to log in to Salesforce.
The Expire all user passwords setting affects internal users, such as employees and
contractors who access your Salesforce org, and external users, such as customers and
partners who access Experience Cloud sites. It doesn’t affect Self-Service portal users
because they aren’t direct Salesforce users.
Note To learn more about the difference
between internal and external users, check out this
video.
This setting doesn't affect users with profiles that have the Password Never Expires
user permission.
To expire passwords, take these steps.
From Setup, use the Quick Find box to find and select
Expire All Passwords.
Select Expire all user passwords.
Save the change.
The next time users log in, they’re prompted to reset their
password.
We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required Cookies
Always Active
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional Cookies
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising Cookies
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.
