1. Don't allow first or last name to be used in the password 2. Force password change using a system pref controlled period
(In reply to Savitra Sirohi from comment #0) > 1. Don't allow first or last name to be used in the password > 2. Force password change using a system pref controlled period I think 1) could be covered by using plugins for password strength. Note: We alredy have a system preference for better password complexity now. Bug 13664 - Add password strength plugin 2) I think is interesting. There is a bug asking for a feature that enforces password reset on first login: Bug 21309 - Enforce password change on login This could act as the foundation for a regular password reset. I think this bug is too broad right now, asking for at least 2 features. Therefore I am closing this bug as 'moved'.