Hello,

we think is fundamental to have a credentials expiring functionality into PUR module because is one of the basic things a user system must to have to comply with basic security rules, for example OWASP Top 10 Web Application Security Risks:

https://owasp.org/www-project-top-ten/OWASP_Top_Ten_2017/Top_10-2017_A2-Broken_Authentication 

It would be great if PUR module also cloud check password strength to avoid weak ones.

Thanks in advance