To increase security, you can require that users change their passwords on a regular basis. Choose the number of days that can elapse before the password must be changed.
The maximum number of days possible is 730. Choose 0 (zero) if the password does not have to be changed.