Security Implementation Guide

Salesforce Security Implementation Guide
Security Overview
User Authentication
Passwords
Single Sign-on Overview
My Domain
Identity Providers
Network-Based Security
Session Security
Custom Login Flows
Configure User Authentication
Setting Login Restrictions
Set Password Policies
Expire Passwords for Your Users
Set Trusted IP Ranges for Your Organization
Modify Session Security Settings
Create a Login Flow
Connect a Login Flow to a Profile
Salesforce Two-Factor Authentication
Enabling Single Sign-On
Connected Apps
Desktop Client Access
User Authorization
Data Sharing Tools
Monitoring Your Organization's Security
Platform Encryption
Security Tips for Apex and Visualforce Development
PDF

Newer Version Available

This content describes an older version of this product. View Latest

Expire Passwords for Your Users

As an administrator, you can expire passwords for all users any time you want to enforce extra security for your organization.
Available in: both Salesforce Classic and Lightning Experience
Available in: Professional, Enterprise, Performance, Unlimited, Developer, and Database.com Editions

User Permissions Needed
To expire all passwords: “Manage Internal Users”

To expire passwords for all users, except those users with the “Password Never Expires” permission:

  1. From Setup, enter Expire All Passwords in the Quick Find box, then select Expire All Passwords.
  2. Select Expire all user passwords.
  3. Click Save.

The next time users log in, they are prompted to reset their password.

Considerations When Expiring Passwords

  • Users might need to activate their computers to log in to Salesforce.
  • Expire all user passwords doesn’t affect Self-Service portal users, because they aren’t direct Salesforce users.