The core Joomla has a feature where you can mark a user as require password reset. While you can still do this manually, UE Man gives you a way to automate this based on the date that the user last reset their password. This way you can ensure that your users regularly change their passwords. To turn this feature on, you need to adjust the options in the System - UE Man plugin.
System - UE Man
<strong>Force password reset after (days):</strong>If set to 0, this feature is disabled (default setting). To turn it on, simply enter the number of days between forced password resets. For instance, if you enter 30, then every 30 days every Joomla user will be marked as requiring password reset, so next time they log in they will be forced to change their password.
<strong>Disable after (days):</strong>This works in conjunction with the forced password reset, and allows you to automatically block users who do not change their password a number of days after the forced password reset. If set to 0, this feature is disabled (default setting). To turn it on, simply enter the number of days after the forced password reset in which any account that has not had it's password changed is disabled.
<strong>Email reset password users:</strong>Do you want to notify users via email that their account has been marked as require password reset. If you want to change the wording of the email, you can create a language override for PLG_SYSTEM_UEMAN_PASSWORDFORCERESET_SUBJECT and PLG_SYSTEM_UEMAN_PASSWORDFORCERESET_EMAIL_BODY.