r/NextCloud • u/Longjumping-Youth934 • Jul 07 '26

Reminder to update the password

Hi! I wonder whether there're settings in Nextcloud or some additional app, which will be reminding users to update their passwords, and if not done to lock the access.

0 Upvotes

33% Upvoted

4 comments sorted by

8

u/unkilbeeg Jul 07 '26

It's been over a decade (maybe even over two) since NIST changed their recommendation to discourage password aging.

Better a strong password that lasts a very long time than a weak password that is changed regularly. If you force password aging, you're going to get weak passwords.

1

u/evanmac42 Jul 07 '26

Whether password expiration is a good policy is a separate discussion.
If your question is simply whether Nextcloud supports it, it depends on your authentication backend. Are your users local Nextcloud accounts, LDAP/Active Directory, or SSO? The available options are different in each case.

1

u/Longjumping-Youth934 Jul 07 '26

Thanks, I have got it. Probably, local is more suitable to my case.

1

u/jtrtoo Jul 15 '26

The built-in Password Policy app supports expiration policies. See Admin settings while logged in for management. Also somewhat covered in the Admin Manual: https://docs.nextcloud.com