Expire Password Feature

[9mido]

What does everyone think about an optional setting like ACCOUNT_PASSWORD_EXPIRE = True|False and ACCOUNT_PASSWORD_EXPIRE_DAYS = integer. This would allow for any website to have the ability to force users to change their password every X number of days.

Another possibility would be whether you would want to allow users to re-use their previous passwords again or not. But this can always be a future thing.

This stackoverflow answer uses a custom user model to do it so that would probably need to be written in the documentation with a custom user model example.

https://stackoverflow.com/questions/15571046/django-force-password-expiration

There is also:

https://github.com/pinax/django-user-accounts

But how would this tie into allauth?

[derek-adair]

I would support this and any other feature that allows for the option of more security / privacy.

+1

[varunsaral]

@pennersr I'll do it, will share the outline shortly with you.

[varunsaral]

Coming back to this, will start scoping this.

[shoaib-moeen]

@pennersr . Can I take a look into this?

[varunsaral]

Hey @shoaib-moeen apologise I'm late in this but I have already started working on this. I'll be very grateful if you can look into some other issues. Thank you. Sorry @pennersr for being late, I was busy in work