# Make a user choose a new password at their next login (Expire Password)

> Force a mailbox to ask for a new password at the next login, so the user picks their own instead of the admin setting one.
>
> Source: https://docs.officeniaga.com/expire-password/

Use **Expire Password** in **Domain Settings** when you want a user to set their own new password at their next login, instead of you choosing one for them with [Change Password](/change-password/). This suits a new hire who was given a temporary password, a mailbox where the password was shared, or any account you suspect was compromised.

1. Click the **Domain Settings** icon in the top bar.
2. Click **Accounts** in the left nav.
3. Select the user whose password should expire.

   *(Screenshot: Domain Settings, Accounts, select a user)*

4. Click the **...** button (tooltip **Actions**), then click **Expire Password**.

   *(Screenshot: Expire Password)*

5. The next time the user logs in to webmail, they are asked to choose a new password. Send them to [Log in to webmail](/log-in/) if they need a hand getting in.

   

The **...** (**Actions**) button in the **Accounts** list also has **Impersonate User**, which opens the mailbox as that user for troubleshooting (see [Open a staff member's mailbox](/impersonate-user/)). Clicking a user to open their own page gives a **...** menu with more actions, including **Change Password**, **Reset Two-Step** and **Rename**. See [Change or reset a password](/change-password/), [Turn on two-step authentication](/two-step-authentication/) and [Change a user's email address](/rename-mailbox/).

If users on your domain were set up with **Disable password changes** turned on in **Domain Settings** > **User Defaults**, they may not be able to set a new password at all. This interaction with Expire Password has not been confirmed, so check that setting if a user says Expire Password is not letting them in.

*(Screenshot: User Defaults, Disable password changes)*

## Still stuck

WhatsApp our support team at [+60 16-916 3324](https://wa.me/60169163324).

## Common issues

### Should I use Expire Password or Change Password?

Use Change Password when you want to set the new password yourself and hand it to the user. Use Expire Password when you want the user to pick their own password instead, such as after a temporary or shared password.

### The user still cannot set a new password.

Check Domain Settings > User Defaults for the Disable password changes toggle. It sets the default for new mailboxes, but if it also applies to this user, turning it off may let them set a new password.

### Can I set the password myself instead of waiting for the user?

Yes. Open the user in Domain Settings > Accounts and use Change Password to set it directly, instead of Expire Password.