As an admin, to enforce extra security for your Salesforce orgs and Experience Cloud sites, you can expire passwords for all users. After expiring passwords, all users are prompted to reset their password the next time they log in.
Required Editions
| Available in: both Salesforce Classic and Lightning Experience |
| Available in: Professional, Enterprise, Performance, Unlimited, Developer, and Database.com Editions |
| User Permissions Needed | |
|---|---|
| To expire all passwords: | Reset User Passwords and Unlock Users |
Note To prevent admins from expiring passwords for all users in the org, contact
Salesforce Customer Support.
Before you expire passwords, review these considerations.
- Users can be prompted to complete Device Activation to log in to Salesforce.
- The Expire all user passwords setting affects internal users, such as employees and
contractors who access your Salesforce org, and external users, such as customers and
partners who access Experience Cloud sites. It doesn’t affect Self-Service portal users
because they aren’t direct Salesforce users.Note To learn more about the difference between internal and external users, check out this video.
- This setting doesn't affect users with profiles that have the Password Never Expires user permission.
To expire passwords, take these steps.
- From Setup, use the Quick Find box to find and select Expire All Passwords.
- Select Expire all user passwords.
-
Save the change.
The next time users log in, they’re prompted to reset their password.