The user password is valid for 90 days. After this period, the user must modify it by logging into their account.