Force Password Change

Force password change is set in the mdl_user_preferences table with the value auth_forcepasswordchange. A value of 0 means a password change is not required while a 1 means the user will be forced to change their password. This value will typically not exist at all until a user is forced to change their password at least once.

If you ever need to bulk-force password change across all users in the system (e.g. for security reasons), you can add the auth_forcepasswordchange option to the mdl_user_preferences with a value of 1 if it doesn't exist, or simply update it from 0 to 1 if it does. Remember this is only relevant to internal authentication methods such as the default manual authentication method.