Force Password Change
Regularly requiring users to change their password is a common security practice used by many organizations to strengthen account protection and reduce the risk of unauthorized access.
Why Enforce Password Changes?
- Passwords can weaken over time due to methods like dictionary attacks or evolving hacking techniques.
- Forcing periodic password updates ensures that users select stronger and more secure alternatives.
- Many regulatory frameworks and industry standards (e.g., GDPR, HIPAA, PCI DSS) mandate password change policies to safeguard user data and maintain compliance.
How to Force a Password Change
- Go to the Force Password Change option from the User Tasks navigation menu on the left side of the screen.

- This will prompt a confirmation window.

- Click Yes to confirm, or click No to cancel.
If you need to enforce password changes at the beginning of the year, for GDPR compliance or Xstock certification, select all users, then click Force Password Change. The next time users log in, they will be prompted to update their passwords.
Watch the video below for a visual guide on Forcing Password Changes.