Salesforce Security Guide

Salesforce Security Guide
Salesforce Security Basics
Authenticate Users
The Elements of User Authentication
Configure User Authentication
Restrict Where and When Users Can Log In to Salesforce
Set Password Policies
Expire Passwords for All Users
Modify Session Security Settings
Create a Login Flow
Connect a Login Flow to a Profile
Set Up Two-Factor Authentication
Give Users Access to Data
Share Objects and Fields
Protect Your Salesforce Data with Shield Platform Encryption
Monitoring Your Organization's Security
Security Guidelines for Apex and Visualforce Development
PDF

Newer Version Available

This content describes an older version of this product. View Latest

Expire Passwords for All Users

As an administrator, you can expire passwords for all users any time you want to enforce extra security for your organization. After expiring passwords, all users are prompted to reset their password the next time they log in.
Available in: both Salesforce Classic and Lightning Experience
Available in: Professional, Enterprise, Performance, Unlimited, Developer, and Database.com Editions

User Permissions Needed
To expire all passwords: “Manage Internal Users”

To expire passwords for all users, except those users with the “Password Never Expires” permission:

  1. From Setup, enter Expire All Passwords in the Quick Find box, then select Expire All Passwords.
  2. Select Expire all user passwords.
  3. Click Save.

The next time users log in, they are prompted to reset their password.

Considerations When Expiring Passwords

  • Users might need to activate their computers to log in to Salesforce.
  • Expire all user passwords doesn’t affect Self-Service portal users, because they aren’t direct Salesforce users.