Staff

Technical Tip: Password expiration date does not update when the new password is created in the GUI

Forum|Forum|6 months ago
February 9, 2026
0 replies
344 views

Description

This article describes an issue where updating an administrator password through the GUI does not update the associated password expiration date.

Scope

FortiGate.

Solution

To create a system password policy in the GUI

Navigate to System -> Settings -> Password Policy -> Password scope Admin -> Password expiration.

This article describes an issue in which the administrator password expiration date remains set to the previous value when the password is updated through the GUI, navigate to System → Administrator → Select Admin → Change Password.

Refer to the image below, where the set password-expire shows 2026-02-12 11:15:21, and the password expiration date does not update when a new password is created via the GUI.

The local user password was updated via the CLI, and the password expiration date reflected the change as expected.

config system admin
edit "aditya"
set accprofile "super_admin"
set vdom "root"
set password-expire 2026-03-08 16:51:03
set password ENC xxxxx
next
end

Note: The password policy cannot be applied to a user group or a local remote user, such as LDAP/RADIUS/TACACS+.

This issue has been resolved in: v7.2.9, v7.4.5, and v7.6.1.

Workaround: Update the password after the expiration date by logging in using the expired admin or update via CLI/SSH.